Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 08:39:20 +0000 CVE-2026-33330 — FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback https://cve.radiocsirt.org/vuln/cve-2026-33330 <p><strong>Affected:</strong> error311 FileRise</p> <p>FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise&#39;s ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save callback to overwrite that file with attacker-controlled content. This issue has been patched in version 3.10.0.</p> <p><strong>Affected:</strong> error311 FileRise</p> <p>FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise&#39;s ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save callback to overwrite that file with attacker-controlled content. This issue has been patched in version 3.10.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-33330