Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 03:12:12 +0000 CVE-2026-71234 — Documize Community - Attachment Download Authorization Bypass via Non-Validated secure Token https://cve.radiocsirt.org/vuln/cve-2026-71234 <p><strong>Affected:</strong> documize community</p> <p>Documize Community&#39;s attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) &gt; 0), without comparing it to any server-stored value.</p> <p><strong>Affected:</strong> documize community</p> <p>Documize Community&#39;s attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) &gt; 0), without comparing it to any server-stored value.</p> https://cve.radiocsirt.org/vuln/cve-2026-71234