{"items":[{"id":"CVE-2026-61668","published":"2026-09-15T17:29:26.029Z","updated":"2026-09-17T16:33:44.753Z","title":"DIRAC: Pilot code downloaded over unverified HTTPS connection","severity":"HIGH","score":8.1,"vendor":"DIRACGrid","product":"DIRAC","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61667","published":"2026-09-15T17:26:16.456Z","updated":"2026-09-15T18:44:14.827Z","title":"DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval","severity":"CRITICAL","score":9.9,"vendor":"DIRACGrid","product":"DIRAC","kev":false,"epss":0.01213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-45579","published":"2026-09-15T17:23:34.557Z","updated":"2026-09-15T18:48:26.192Z","title":"DIRAC: RCE in RequestManager due to eval on untrusted input","severity":"CRITICAL","score":9.9,"vendor":"DIRACGrid","product":"DIRAC","kev":false,"epss":0.00864,"kevAdded":null,"exploit":false},{"id":"CVE-2025-54066","published":"2025-07-17T14:44:27.982Z","updated":"2025-07-17T20:03:49.445Z","title":"DiracX-Web login page has Open Redirect vulnerability","severity":"MEDIUM","score":4.7,"vendor":"DIRACGrid","product":"diracx-web","kev":false,"epss":0.00413,"kevAdded":null,"exploit":true},{"id":"CVE-2024-29905","published":"2024-04-09T16:49:48.158Z","updated":"2024-08-02T01:17:58.559Z","title":"DIRAC: Unauthorized users can read proxy contents during generation","severity":"HIGH","score":8.1,"vendor":"DIRACGrid","product":"DIRAC","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2024-24825","published":"2024-02-08T23:39:28.741Z","updated":"2025-06-17T19:57:31.178Z","title":"TokenManager not checking permissions on cached tokens in DIRAC","severity":"CRITICAL","score":9.1,"vendor":"DIRACGrid","product":"DIRAC","kev":false,"epss":0.00534,"kevAdded":null,"exploit":false}]}