Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 02:54:30 +0000 EUVD-2026-338038 https://cve.radiocsirt.org/vuln/euvd-2026-338038 EUVD-2026-338038 https://cve.radiocsirt.org/vuln/euvd-2026-338038 fkie_cve-2026-49488 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49488 <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Apache OpenMeetings.</p> <p>This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM server, including credentials and secrets, via a crafted download request.</p> <p>Users are recommended to upgrade to version 9.1.0, which fixes the issue.</p> <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Apache OpenMeetings.</p> <p>This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM server, including credentials and secrets, via a crafted download request.</p> <p>Users are recommended to upgrade to version 9.1.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49488 GHSA-436m-m73c-vq4g https://cve.radiocsirt.org/vuln/ghsa-436m-m73c-vq4g <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Apache OpenMeetings.</p> <p>This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM server, including credentials and secrets, via a crafted download request.</p> <p>Users are recommended to upgrade to version 9.1.0, which fixes the issue.</p> <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Apache OpenMeetings.</p> <p>This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM server, including credentials and secrets, via a crafted download request.</p> <p>Users are recommended to upgrade to version 9.1.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-436m-m73c-vq4g