https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 04:25:36 +0000 https://cve.radiocsirt.org/vuln/cve-2026-57952 <p><strong>Affected:</strong> its-a-feature Mythic</p> <p>Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_webhook, c2profile_redirect_rules_webhook, c2profile_get_ioc_webhook, c2profile_sample_message_webhook) that fail to verify payload ownership. An operator in one operation can invoke these endpoints with a known payload UUID from another operation to access that operation&#39;s C2 profile configuration including encryption keys and callback parameters.</p> <p><strong>Affected:</strong> its-a-feature Mythic</p> <p>Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_webhook, c2profile_redirect_rules_webhook, c2profile_get_ioc_webhook, c2profile_sample_message_webhook) that fail to verify payload ownership. An operator in one operation can invoke these endpoints with a known payload UUID from another operation to access that operation&#39;s C2 profile configuration including encryption keys and callback parameters.</p> https://cve.radiocsirt.org/vuln/cve-2026-57952