https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:45:20 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-100727 <p>An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as &#34;Local&#34;.</p> <p>An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as &#34;Local&#34;.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-100727 https://vulnerability.circl.lu/vuln/ghsa-h2pc-3fh7-hv26 <p>An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as &#34;Local&#34;.</p> <p>An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as &#34;Local&#34;.</p> https://vulnerability.circl.lu/vuln/ghsa-h2pc-3fh7-hv26 https://vulnerability.circl.lu/vuln/jvndb-2026-000144 <p>GROWI provided by GROWI, Inc. contains the following vulnerability:&lt;a href=&#39;https://cwe.mitre.org/data/definitions/552.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Files or Directories Accessible to External Parties (CWE-552) - CVE-2026-100727&lt;/li&gt;&lt;/ul&gt;GROWI, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and GROWI, Inc. coordinated under the Information Security Early Warning Partnership.</p> <p>GROWI provided by GROWI, Inc. contains the following vulnerability:&lt;a href=&#39;https://cwe.mitre.org/data/definitions/552.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Files or Directories Accessible to External Parties (CWE-552) - CVE-2026-100727&lt;/li&gt;&lt;/ul&gt;GROWI, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and GROWI, Inc. coordinated under the Information Security Early Warning Partnership.</p> https://vulnerability.circl.lu/vuln/jvndb-2026-000144