https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:49:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349232 EUVD-2026-349232 https://cve.radiocsirt.org/vuln/euvd-2026-349232 https://cve.radiocsirt.org/vuln/fkie_cve-2026-64827 <p>Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHP_SELF and skips authentication when the value matches &#39;login_admin.php&#39;. Attackers can append &#39;/login_admin.php&#39; to the path of any target PHP script to cause the authentication check to pass and gain unauthenticated access to all PHP scripts under the manager HTML directory.</p> <p>Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHP_SELF and skips authentication when the value matches &#39;login_admin.php&#39;. Attackers can append &#39;/login_admin.php&#39; to the path of any target PHP script to cause the authentication check to pass and gain unauthenticated access to all PHP scripts under the manager HTML directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-64827 https://cve.radiocsirt.org/vuln/ghsa-9v39-f83v-66p8 <p>Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHP_SELF and skips authentication when the value matches &#39;login_admin.php&#39;. Attackers can append &#39;/login_admin.php&#39; to the path of any target PHP script to cause the authentication check to pass and gain unauthenticated access to all PHP scripts under the manager HTML directory.</p> <p>Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHP_SELF and skips authentication when the value matches &#39;login_admin.php&#39;. Attackers can append &#39;/login_admin.php&#39; to the path of any target PHP script to cause the authentication check to pass and gain unauthenticated access to all PHP scripts under the manager HTML directory.</p> https://cve.radiocsirt.org/vuln/ghsa-9v39-f83v-66p8