https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T02:13:18.469812+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-80254 fkie_cve-2026-80254 2026-10-04T02:13:18.586241+00:00

Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other user's password.

 https://vulnerability.circl.lu/vuln/ghsa-hc97-2jfm-wf2q GHSA-hc97-2jfm-wf2q 2026-10-04T02:13:18.586421+00:00

Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other user's password.

 https://vulnerability.circl.lu/vuln/jvndb-2026-000127 jvndb-2026-000127 2026-10-04T02:13:18.586471+00:00

ShizenBox2 provided by Shizen Connect Inc. contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/1263.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/639.html' target='_blank'></a><ul><li>Improper physical access control (CWE-1263) - CVE-2026-80253</li><li>Authorization bypass through user-controlled key (CWE-639) - CVE-2026-80254</li></ul>CVE-2026-80253 Naohide Waguri of PwC Consulting LLC reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-80254 Raaqim Mohammed of PwC Consulting LLC reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.