https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:53:31 +0000 https://cve.radiocsirt.org/vuln/cve-2026-18750 <p><strong>Affected:</strong> CERT/CC VINCE</p> <p>vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record&#39;s contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing (or read email/name) for another vendor&#39;s contact.</p> <p><strong>Affected:</strong> CERT/CC VINCE</p> <p>vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record&#39;s contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing (or read email/name) for another vendor&#39;s contact.</p> https://cve.radiocsirt.org/vuln/cve-2026-18750