https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 13:51:25 +0000 https://cve.radiocsirt.org/vuln/cve-2026-54103 <p><strong>Affected:</strong> Government Accountability Office Electronic Protest Docketing System (EPDS), Civilian Board of Contract Appeals Electronic Docketing System (EDS)</p> <p>The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) does not authenticate password change requests to the &#39;/update-profile/N&#39; API endpoint. A remote, unauthenticated attacker could change an arbitrary user&#39;s password.</p> <p><strong>Affected:</strong> Government Accountability Office Electronic Protest Docketing System (EPDS), Civilian Board of Contract Appeals Electronic Docketing System (EDS)</p> <p>The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) does not authenticate password change requests to the &#39;/update-profile/N&#39; API endpoint. A remote, unauthenticated attacker could change an arbitrary user&#39;s password.</p> https://cve.radiocsirt.org/vuln/cve-2026-54103