https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-02T08:36:02.629795+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-3322 fkie_cve-2026-3322 2026-11-02T08:36:02.633319+00:00

Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.

 https://db.gcve.eu/vuln/gcve-1988-2026-0464 GCVE-1988-2026-0464 — SCHUTZWERK-SA-2025-002: Privilege escalation in Lobster_pro through request replaying 2026-11-02T08:36:02.633415+00:00

Affected: unknown SCHUTZWERK-SA-2025-002 Privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

Privilege escalation via request replaying in Lobster_pro =========================================================

version 4.12.12-LTS and potentially other versions prior to 25.1.3.

Metadata ========

- - Affected product: Lobster_pro

- - Vendor: Lobster DATA GmbH

- - CVE ID: CVE-2026-3322 - - CVE URL: https://www.cve.org/CVERecord?id=CVE-2026-3322 - - CVSS 4.0 score: 5.6 - - Advisory URL: https://www.schutzwerk.com/en/blog/schutzwerk-sa-2025-002/

Details =======

Risk ====

information stored in Lobster_pro.

Solution/Mitigation ===================

Update Lobster_pro to version 25.1.3 or later.

Timeline ========

- - 2025-06-26 Vulnerability reported to vendor - - 2025-10-09 Vendor releases version 25.0.1 to address the vulnerability - - 2025-11-19 Vendor releases version 25.1.3 with additional fixes

undisclosed reasons. - - 2026-10-26 Advisory released

Credits =======

The vulnerability was discovered by Daniel Marner of SCHUTZWERK GmbH.

Footnotes =========

[0] https://en.wikipedia.org/wiki/Action_Message_Format -----BEGIN PGP SIGNATURE-----

iQJOBAEBCgA4FiEEgLsg7Oj/wY3LSF87GrXfkTIXLrsFAmrfZz0aHGFkdmlzb3Jp ZXNAc2NodXR6d2Vyay5jb20ACgkQGrXfkTIXLrsQ9g/+MUYMsmoaxs5JxKD5Obas SIbfHKCwSutmpE1Q8j0Ao5oG3IR9Zo0SgFhFFPelH5E7Q6lf2C0YbretCMvxCFXx Ybg5VX9OFQFazRDP/9mx9LaT+ZSwBFLMnlPDM5Pwudn7xoNEoVmRbNIibwVhhzqB U2Hmd0gHfUZbhtA95lCm6ODKBFxqV1MP/LRYbVM8Qp6BBT0V357VsVfUwAcNyKdo ObmuXRA9p2iuElF67DwjAvLYNzU4C2/eUjLw9T9pJhKNs…

 https://db.gcve.eu/vuln/ghsa-7fg6-gvjw-377p GHSA-7fg6-gvjw-377p 2026-11-02T08:36:02.633532+00:00

Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.