Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 20:32:51 +0000 CVE-2026-92794 — OpenSign through 2.41.3 Information Disclosure via getDocument https://db.gcve.eu/vuln/cve-2026-92794 <p><strong>Affected:</strong> OpenSignLabs OpenSign</p> <p>OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verification is disabled. Attackers can supply a document identifier from guest signing links to retrieve complete document details including all signers&#39; information, sender identity, and valid download tokens without authentication.</p> <p><strong>Affected:</strong> OpenSignLabs OpenSign</p> <p>OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verification is disabled. Attackers can supply a document identifier from guest signing links to retrieve complete document details including all signers&#39; information, sender identity, and valid download tokens without authentication.</p> https://db.gcve.eu/vuln/cve-2026-92794