https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 12:09:34 +0000 https://vulnerability.circl.lu/sighting/ce835e8c-46a7-49c0-ae31-0985c72aa649/export {"uuid": "ce835e8c-46a7-49c0-ae31-0985c72aa649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94414", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117410719592236987", "content": "CVE-2026-94414 jshERP through 3.6 misses an authz check on POST /userBusiness/updateBtnStr, letting any authenticated user rewrite role button-permission configs across the tenant. CVSS 5.4, patch status unknown. Review https://www.valtersit.com/cve/CVE-2026-94414/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-10-09T11:30:08.668788Z"} {"uuid": "ce835e8c-46a7-49c0-ae31-0985c72aa649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94414", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117410719592236987", "content": "CVE-2026-94414 jshERP through 3.6 misses an authz check on POST /userBusiness/updateBtnStr, letting any authenticated user rewrite role button-permission configs across the tenant. CVSS 5.4, patch status unknown. Review https://www.valtersit.com/cve/CVE-2026-94414/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-10-09T11:30:08.668788Z"} https://vulnerability.circl.lu/sighting/ce835e8c-46a7-49c0-ae31-0985c72aa649/export Fri, 09 Oct 2026 11:30:08 +0000