https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 08:36:04 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-3322 <p>Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.</p> <p>Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.</p> https://db.gcve.eu/vuln/fkie_cve-2026-3322 https://db.gcve.eu/vuln/gcve-1988-2026-0464 <p><strong>Affected:</strong> unknown SCHUTZWERK-SA-2025-002 Privilege escalation</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512</p> <p>Privilege escalation via request replaying in Lobster_pro =========================================================</p> <p>version 4.12.12-LTS and potentially other versions prior to 25.1.3.</p> <p>Metadata ========</p> <p>- - Affected product: Lobster_pro</p> <p>- - Vendor: Lobster DATA GmbH</p> <p>- - CVE ID: CVE-2026-3322 - - CVE URL: https://www.cve.org/CVERecord?id=CVE-2026-3322 - - CVSS 4.0 score: 5.6 - - Advisory URL: https://www.schutzwerk.com/en/blog/schutzwerk-sa-2025-002/</p> <p>Details =======</p> <p>Risk ====</p> <p>information stored in Lobster_pro.</p> <p>Solution/Mitigation ===================</p> <p>Update Lobster_pro to version 25.1.3 or later.</p> <p>Timeline ========</p> <p>- - 2025-06-26 Vulnerability reported to vendor - - 2025-10-09 Vendor releases version 25.0.1 to address the vulnerability - - 2025-11-19 Vendor releases version 25.1.3 with additional fixes</p> <p>undisclosed reasons. - - 2026-10-26 Advisory released</p> <p>Credits =======</p> <p>The vulnerability was discovered by Daniel Marner of SCHUTZWERK GmbH.</p> <p>Footnotes =========</p> <p>[0] https://en.wikipedia.org/wiki/Action_Message_Format -----BEGIN PGP SIGNATURE-----</p> <p>iQJOBAEBCgA4FiEEgLsg7Oj/wY3LSF87GrXfkTIXLrsFAmrfZz0aHGFkdmlzb3Jp ZXNAc2NodXR6d2Vyay5jb20ACgkQGrXfkTIXLrsQ9g/+MUYMsmoaxs5JxKD5Obas SIbfHKCwSutmpE1Q8j0Ao5oG3IR9Zo0SgFhFFPelH5E7Q6lf2C0YbretCMvxCFXx Ybg5VX9OFQFazRDP/9mx9LaT+ZSwBFLMnlPDM5Pwudn7xoNEoVmRbNIibwVhhzqB U2Hmd0gHfUZbhtA95lCm6ODKBFxqV1MP/LRYbVM8Qp6BBT0V357VsVfUwAcNyKdo ObmuXRA9p2iuElF67DwjAvLYNzU4C2/eUjLw9T9pJhKNs…</p> <p><strong>Affected:</strong> unknown SCHUTZWERK-SA-2025-002 Privilege escalation</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512</p> <p>Privilege escalation via request replaying in Lobster_pro =========================================================</p> <p>version 4.12.12-LTS and potentially other versions prior to 25.1.3.</p> <p>Metadata ========</p> <p>- - Affected product: Lobster_pro</p> <p>- - Vendor: Lobster DATA GmbH</p> <p>- - CVE ID: CVE-2026-3322 - - CVE URL: https://www.cve.org/CVERecord?id=CVE-2026-3322 - - CVSS 4.0 score: 5.6 - - Advisory URL: https://www.schutzwerk.com/en/blog/schutzwerk-sa-2025-002/</p> <p>Details =======</p> <p>Risk ====</p> <p>information stored in Lobster_pro.</p> <p>Solution/Mitigation ===================</p> <p>Update Lobster_pro to version 25.1.3 or later.</p> <p>Timeline ========</p> <p>- - 2025-06-26 Vulnerability reported to vendor - - 2025-10-09 Vendor releases version 25.0.1 to address the vulnerability - - 2025-11-19 Vendor releases version 25.1.3 with additional fixes</p> <p>undisclosed reasons. - - 2026-10-26 Advisory released</p> <p>Credits =======</p> <p>The vulnerability was discovered by Daniel Marner of SCHUTZWERK GmbH.</p> <p>Footnotes =========</p> <p>[0] https://en.wikipedia.org/wiki/Action_Message_Format -----BEGIN PGP SIGNATURE-----</p> <p>iQJOBAEBCgA4FiEEgLsg7Oj/wY3LSF87GrXfkTIXLrsFAmrfZz0aHGFkdmlzb3Jp ZXNAc2NodXR6d2Vyay5jb20ACgkQGrXfkTIXLrsQ9g/+MUYMsmoaxs5JxKD5Obas SIbfHKCwSutmpE1Q8j0Ao5oG3IR9Zo0SgFhFFPelH5E7Q6lf2C0YbretCMvxCFXx Ybg5VX9OFQFazRDP/9mx9LaT+ZSwBFLMnlPDM5Pwudn7xoNEoVmRbNIibwVhhzqB U2Hmd0gHfUZbhtA95lCm6ODKBFxqV1MP/LRYbVM8Qp6BBT0V357VsVfUwAcNyKdo ObmuXRA9p2iuElF67DwjAvLYNzU4C2/eUjLw9T9pJhKNs…</p> https://db.gcve.eu/vuln/gcve-1988-2026-0464 https://db.gcve.eu/vuln/ghsa-7fg6-gvjw-377p <p>Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.</p> <p>Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.</p> https://db.gcve.eu/vuln/ghsa-7fg6-gvjw-377p