https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:41:14 +0000 https://cve.radiocsirt.org/vuln/cve-2026-64827 <p><strong>Affected:</strong> Telenia Software TVox</p> <p>Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHP_SELF and skips authentication when the value matches &#39;login_admin.php&#39;. Attackers can append &#39;/login_admin.php&#39; to the path of any target PHP script to cause the authentication check to pass and gain unauthenticated access to all PHP scripts under the manager HTML directory.</p> <p><strong>Affected:</strong> Telenia Software TVox</p> <p>Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHP_SELF and skips authentication when the value matches &#39;login_admin.php&#39;. Attackers can append &#39;/login_admin.php&#39; to the path of any target PHP script to cause the authentication check to pass and gain unauthenticated access to all PHP scripts under the manager HTML directory.</p> https://cve.radiocsirt.org/vuln/cve-2026-64827