https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:02:08 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-82582 <p>An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware&#39;s shared file feature.</p> <p>An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware&#39;s shared file feature.</p> https://db.gcve.eu/vuln/fkie_cve-2026-82582 https://db.gcve.eu/vuln/ghsa-fpq2-6xq4-6xm4 <p>An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware&#39;s shared file feature.</p> <p>An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware&#39;s shared file feature.</p> https://db.gcve.eu/vuln/ghsa-fpq2-6xq4-6xm4 https://db.gcve.eu/vuln/jvndb-2026-000130 <p>SHIRASAGI provided by SHIRASAGI Project contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/639.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-81635&lt;/li&gt;&lt;li&gt;Authorization bypass (CWE-639) - CVE-2026-82582&lt;/li&gt;&lt;/ul&gt;CVE-2026-81635 Tonosaki Aoba of Tokyo Denki University remote control Laboratory reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-82582 Kuniyoshi Noguchi @KuniNogu remote control Laboratory reported these vulnerabilities to SHIRASAGI Project and IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>SHIRASAGI provided by SHIRASAGI Project contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/639.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-81635&lt;/li&gt;&lt;li&gt;Authorization bypass (CWE-639) - CVE-2026-82582&lt;/li&gt;&lt;/ul&gt;CVE-2026-81635 Tonosaki Aoba of Tokyo Denki University remote control Laboratory reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-82582 Kuniyoshi Noguchi @KuniNogu remote control Laboratory reported these vulnerabilities to SHIRASAGI Project and IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://db.gcve.eu/vuln/jvndb-2026-000130