https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:11:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-374183 EUVD-2026-374183 https://cve.radiocsirt.org/vuln/euvd-2026-374183 https://cve.radiocsirt.org/vuln/fkie_cve-2026-94536 <p>lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing authenticated users to read any employee&#39;s roles and permissions. Attackers can supply arbitrary employeeId values to enumerate other employees&#39; role codes, permission codes, and complete front-end router trees without authorization checks.</p> <p>lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing authenticated users to read any employee&#39;s roles and permissions. Attackers can supply arbitrary employeeId values to enumerate other employees&#39; role codes, permission codes, and complete front-end router trees without authorization checks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-94536 https://cve.radiocsirt.org/vuln/ghsa-gvmp-m7fp-qm34 <p>lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing authenticated users to read any employee&#39;s roles and permissions. Attackers can supply arbitrary employeeId values to enumerate other employees&#39; role codes, permission codes, and complete front-end router trees without authorization checks.</p> <p>lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing authenticated users to read any employee&#39;s roles and permissions. Attackers can supply arbitrary employeeId values to enumerate other employees&#39; role codes, permission codes, and complete front-end router trees without authorization checks.</p> https://cve.radiocsirt.org/vuln/ghsa-gvmp-m7fp-qm34