<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-11-10T05:00:56.792596+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://db.gcve.eu/vuln/fkie_cve-2026-105296</id>
    <title>fkie_cve-2026-105296</title>
    <updated>2026-11-10T05:00:56.794793+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed.</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/fkie_cve-2026-105296"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/ghsa-58g4-6m6r-79h4</id>
    <title>GHSA-58g4-6m6r-79h4</title>
    <updated>2026-11-10T05:00:56.794858+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed.</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/ghsa-58g4-6m6r-79h4"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/jvndb-2026-000165</id>
    <title>jvndb-2026-000165</title>
    <updated>2026-11-10T05:00:56.794877+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Multiple products provided by Akeeba Ltd. fail to check properly the anti-CSRF tokens on some actions.&lt;a href='https://cwe.mitre.org/data/definitions/352.html' target='_blank'&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Cross-Site Request Forgery (CWE-352) - CVE-2026-105296&lt;/li&gt;&lt;/ul&gt;Kuniyoshi Noguchi @KuniNogu reported the vulnerability on Akeeba Backup for Joomla! to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

The developer found the vulnerability independently of our reporting and was progressing to release each fixed version.</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/jvndb-2026-000165"/>
  </entry>
</feed>
