Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 17:09:35 +0000 EUVD-2026-326399 https://cve.radiocsirt.org/vuln/euvd-2026-326399 EUVD-2026-326399 https://cve.radiocsirt.org/vuln/euvd-2026-326399 fkie_cve-2026-53469 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53469 <p>A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments, leading to a critical loss of availability and integrity across the entire SaaS platform.</p> <p>A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments, leading to a critical loss of availability and integrity across the entire SaaS platform.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53469 GHSA-6xvf-9742-48w2 — Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API https://cve.radiocsirt.org/vuln/ghsa-6xvf-9742-48w2 <p><strong>Affected:</strong> Go: github.com/kubev2v/migration-planner</p> <p>A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments, leading to a critical loss of availability and integrity across the entire SaaS platform.</p> <p><strong>Affected:</strong> Go: github.com/kubev2v/migration-planner</p> <p>A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments, leading to a critical loss of availability and integrity across the entire SaaS platform.</p> https://cve.radiocsirt.org/vuln/ghsa-6xvf-9742-48w2