https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:14:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-350758 EUVD-2026-350758 https://cve.radiocsirt.org/vuln/euvd-2026-350758 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72692 <p>A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes IsDeclined, DeclineReason, and a caller-supplied DeclineBy pointer without verifying the caller&#39;s identity, enabling workflow termination and evidentiary record falsification against any accessible document.</p> <p>A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes IsDeclined, DeclineReason, and a caller-supplied DeclineBy pointer without verifying the caller&#39;s identity, enabling workflow termination and evidentiary record falsification against any accessible document.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72692 https://cve.radiocsirt.org/vuln/ghsa-fm8m-9x77-qjvw <p>A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes IsDeclined, DeclineReason, and a caller-supplied DeclineBy pointer without verifying the caller&#39;s identity, enabling workflow termination and evidentiary record falsification against any accessible document.</p> <p>A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes IsDeclined, DeclineReason, and a caller-supplied DeclineBy pointer without verifying the caller&#39;s identity, enabling workflow termination and evidentiary record falsification against any accessible document.</p> https://cve.radiocsirt.org/vuln/ghsa-fm8m-9x77-qjvw