https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:20:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-323304 EUVD-2026-323304 https://cve.radiocsirt.org/vuln/euvd-2026-323304 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40547 <p>SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading and executing files previously added through the backup functionality. Critically, due to CVE-2026-40543 (Missing Authorization), any backup file can be read by any (unauthorized) user.</p> <p>This issue affects SOPlanning version 1.55 and below.</p> <p>SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading and executing files previously added through the backup functionality. Critically, due to CVE-2026-40543 (Missing Authorization), any backup file can be read by any (unauthorized) user.</p> <p>This issue affects SOPlanning version 1.55 and below.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40547 https://cve.radiocsirt.org/vuln/ghsa-6g52-vww8-5mh5 <p>SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading and executing files previously added through the backup functionality. Critically, due to CVE-2026-40543 (Missing Authorization), any backup file can be read by any (unauthorized) user.</p> <p>This issue affects SOPlanning version 1.55 and below.</p> <p>SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading and executing files previously added through the backup functionality. Critically, due to CVE-2026-40543 (Missing Authorization), any backup file can be read by any (unauthorized) user.</p> <p>This issue affects SOPlanning version 1.55 and below.</p> https://cve.radiocsirt.org/vuln/ghsa-6g52-vww8-5mh5