https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:50:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351209 EUVD-2026-351209 https://cve.radiocsirt.org/vuln/euvd-2026-351209 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72780 <p>Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts.</p> <p>Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72780 https://cve.radiocsirt.org/vuln/ghsa-jh4m-63fq-p9h9 <p>Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts.</p> <p>Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts.</p> https://cve.radiocsirt.org/vuln/ghsa-jh4m-63fq-p9h9