Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:42:23 +0000 CVE-2025-34140 — ETQ Reliance CG/NXG API Authorization Bypass via ;localized-text URI Suffix https://cve.radiocsirt.org/vuln/cve-2025-34140 <p><strong>Affected:</strong> ETQ Reliance CG (legacy), ETQ Reliance NXG (SaaS)</p> <p>An authorization bypass vulnerability exists in ETQ Reliance (legacy CG and NXG SaaS platforms). By appending a specific URI suffix to certain API endpoints, an unauthenticated attacker can bypass access control checks and retrieve limited sensitive resources. The root cause was a misconfiguration in API authorization logic, which has since been corrected in SE.2025.1 and 2025.1.2.</p> <p><strong>Affected:</strong> ETQ Reliance CG (legacy), ETQ Reliance NXG (SaaS)</p> <p>An authorization bypass vulnerability exists in ETQ Reliance (legacy CG and NXG SaaS platforms). By appending a specific URI suffix to certain API endpoints, an unauthenticated attacker can bypass access control checks and retrieve limited sensitive resources. The root cause was a misconfiguration in API authorization logic, which has since been corrected in SE.2025.1 and 2025.1.2.</p> https://cve.radiocsirt.org/vuln/cve-2025-34140