https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:42:30 +0000 https://cve.radiocsirt.org/vuln/cve-2026-92603 <p><strong>Affected:</strong> continew-org continew-admin</p> <p>ContiNew Admin through 4.1.0 contains an authorization bypass vulnerability in the personal message delete endpoint that allows authenticated users to delete other users&#39; messages and announcements. Attackers can supply arbitrary message identifiers in the IdsReq parameter to remove any message row and purge all recipients&#39; read receipts without ownership validation.</p> <p><strong>Affected:</strong> continew-org continew-admin</p> <p>ContiNew Admin through 4.1.0 contains an authorization bypass vulnerability in the personal message delete endpoint that allows authenticated users to delete other users&#39; messages and announcements. Attackers can supply arbitrary message identifiers in the IdsReq parameter to remove any message row and purge all recipients&#39; read receipts without ownership validation.</p> https://cve.radiocsirt.org/vuln/cve-2026-92603