https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:10:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-363986 EUVD-2026-363986 https://cve.radiocsirt.org/vuln/euvd-2026-363986 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85697 <p>Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing ownership validation on document data identifiers.</p> <p>Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing ownership validation on document data identifiers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-85697 https://cve.radiocsirt.org/vuln/ghsa-p2hj-fj2f-79j4 <p>Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing ownership validation on document data identifiers.</p> <p>Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing ownership validation on document data identifiers.</p> https://cve.radiocsirt.org/vuln/ghsa-p2hj-fj2f-79j4