https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:15:37 +0000 https://cve.radiocsirt.org/vuln/cve-2026-35096 <p><strong>Affected:</strong> KTM System e-BOK</p> <p>KTM System e-BOK is vulnerable to Cross‑Site Request Forgery (CSRF) in both the email-change and password-change functionalities. An attacker can craft a malicious website that, when visited by an authenticated user, automatically sends a forged POST request to the application. This allows the attacker to trigger an unauthorized email or password change on behalf of the victim without their knowledge or interaction.</p> <p>This issue was fixed in the patch published in June 2026.</p> <p><strong>Affected:</strong> KTM System e-BOK</p> <p>KTM System e-BOK is vulnerable to Cross‑Site Request Forgery (CSRF) in both the email-change and password-change functionalities. An attacker can craft a malicious website that, when visited by an authenticated user, automatically sends a forged POST request to the application. This allows the attacker to trigger an unauthorized email or password change on behalf of the victim without their knowledge or interaction.</p> <p>This issue was fixed in the patch published in June 2026.</p> https://cve.radiocsirt.org/vuln/cve-2026-35096