https://db.gcve.eu/organization/2ae99ae9-6e7f-4352-88c9-5a0de661d71c/recent?tab=gna 2026-10-15T11:44:28.327429+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Vulnerabilities published by Computer Incident Response Center Luxembourg as GNA-1. https://db.gcve.eu/vuln/gcve-1-2026-20157 2026-10-12T12:13:40.081904+00:00 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

2026-08-21T14:06:00+00:00 https://db.gcve.eu/vuln/gcve-1-2026-20018 2026-10-12T12:08:34.359422+00:00 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

2026-08-24T08:05:00+00:00 https://db.gcve.eu/vuln/gcve-1-2026-20215 2026-10-07T15:42:40.741136+00:00 MISP Object Sync Drops Objects and Attributes When Description Is Empty

MISP Object Sync Drops Objects and Attributes When Description Is Empty

2026-10-07T15:42:33.394043+00:00 https://db.gcve.eu/vuln/gcve-1-2026-20315 2026-10-07T15:36:46.202908+00:00 MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests

MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests

2026-10-07T15:36:37.527318+00:00 https://db.gcve.eu/vuln/gcve-1-2026-20116 2026-10-07T12:49:37.828681+00:00 MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances

MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances

2026-10-07T12:49:30.116788+00:00 https://db.gcve.eu/vuln/gcve-1-2026-20264 2026-10-07T12:38:41.938484+00:00 MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes

MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes

2026-10-07T12:38:32.205469+00:00 https://db.gcve.eu/vuln/gcve-1-2026-20117 2026-10-06T19:03:57.387737+00:00 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

2026-10-06T18:58:00+00:00 https://db.gcve.eu/vuln/gcve-1-2026-20275 2026-10-06T18:48:26.123050+00:00 MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS

MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS

2026-10-06T18:47:58.276997+00:00 https://db.gcve.eu/vuln/gcve-1-2026-20248 2026-10-02T16:09:38.126317+00:00 MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View

MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View

2026-10-02T16:09:31.553352+00:00 https://db.gcve.eu/vuln/gcve-1-2026-20312 2026-10-02T16:04:47.848957+00:00 MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data

MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data

2026-10-02T16:04:40.155171+00:00