https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T12:16:14.069642+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111683 fkie_cve-2026-111683 2026-10-25T12:16:14.084186+00:00

Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/<id> and /api/server_room/<id> to read asset hostnames, serials and management IPs, and to modify, move or create racks.

 https://db.gcve.eu/vuln/ghsa-7m2f-c6pw-4f2h GHSA-7m2f-c6pw-4f2h 2026-10-25T12:16:14.084281+00:00

Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/<id> and /api/server_room/<id> to read asset hostnames, serials and management IPs, and to modify, move or create racks.