https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T02:02:07.603063+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-82582 fkie_cve-2026-82582 2026-10-03T02:02:07.623577+00:00

An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature.

 https://db.gcve.eu/vuln/ghsa-fpq2-6xq4-6xm4 GHSA-fpq2-6xq4-6xm4 2026-10-03T02:02:07.623643+00:00

An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature.

 https://db.gcve.eu/vuln/jvndb-2026-000130 jvndb-2026-000130 2026-10-03T02:02:07.623662+00:00

SHIRASAGI provided by SHIRASAGI Project contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/639.html' target='_blank'></a><ul><li>Cross-site scripting (CWE-79) - CVE-2026-81635</li><li>Authorization bypass (CWE-639) - CVE-2026-82582</li></ul>CVE-2026-81635 Tonosaki Aoba of Tokyo Denki University remote control Laboratory reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-82582 Kuniyoshi Noguchi @KuniNogu remote control Laboratory reported these vulnerabilities to SHIRASAGI Project and IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.