https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:58:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375523 EUVD-2026-375523 https://cve.radiocsirt.org/vuln/euvd-2026-375523 https://cve.radiocsirt.org/vuln/fkie_cve-2026-94532 <p>lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows authenticated users to read any other user&#39;s full profile. Attackers can iterate the userId parameter to harvest sensitive user information including mobile numbers, email addresses, national identity card numbers, and WeChat and DingTalk OpenIDs.</p> <p>lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows authenticated users to read any other user&#39;s full profile. Attackers can iterate the userId parameter to harvest sensitive user information including mobile numbers, email addresses, national identity card numbers, and WeChat and DingTalk OpenIDs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-94532 https://cve.radiocsirt.org/vuln/ghsa-v92q-v83r-rr2p <p>lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows authenticated users to read any other user&#39;s full profile. Attackers can iterate the userId parameter to harvest sensitive user information including mobile numbers, email addresses, national identity card numbers, and WeChat and DingTalk OpenIDs.</p> <p>lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows authenticated users to read any other user&#39;s full profile. Attackers can iterate the userId parameter to harvest sensitive user information including mobile numbers, email addresses, national identity card numbers, and WeChat and DingTalk OpenIDs.</p> https://cve.radiocsirt.org/vuln/ghsa-v92q-v83r-rr2p