<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/cna-root/INCIBE/recent</id>
  <title>Most recent vulnerabilities from the INCIBE CNA root</title>
  <updated>2026-10-02T07:10:14.154561+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Latest vulnerabilities published by the CNAs operating under the INCIBE root of the CVE Program.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-102514</id>
    <title>CVE-2026-102514 (Secur0)</title>
    <updated>2026-10-01T20:00:51.760000+00:00</updated>
    <content>Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-102514"/>
    <summary>Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive</summary>
    <published>2026-10-01T20:00:51.760000+00:00</published>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-7176</id>
    <title>CVE-2026-7176 (INCIBE)</title>
    <updated>2026-10-01T09:54:26.960000+00:00</updated>
    <content>Multiple vulnerabilities in Entradium by Crocantickets</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-7176"/>
    <summary>Multiple vulnerabilities in Entradium by Crocantickets</summary>
    <published>2026-10-01T09:54:26.960000+00:00</published>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-7175</id>
    <title>CVE-2026-7175 (INCIBE)</title>
    <updated>2026-10-01T09:54:19.351000+00:00</updated>
    <content>Multiple vulnerabilities in Entradium by Crocantickets</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-7175"/>
    <summary>Multiple vulnerabilities in Entradium by Crocantickets</summary>
    <published>2026-10-01T09:54:19.351000+00:00</published>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-7174</id>
    <title>CVE-2026-7174 (INCIBE)</title>
    <updated>2026-10-01T09:54:10.108000+00:00</updated>
    <content>Multiple vulnerabilities in Entradium by Crocantickets</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-7174"/>
    <summary>Multiple vulnerabilities in Entradium by Crocantickets</summary>
    <published>2026-10-01T09:54:10.108000+00:00</published>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-7173</id>
    <title>CVE-2026-7173 (INCIBE)</title>
    <updated>2026-10-01T09:54:02.319000+00:00</updated>
    <content>Multiple vulnerabilities in Entradium by Crocantickets</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-7173"/>
    <summary>Multiple vulnerabilities in Entradium by Crocantickets</summary>
    <published>2026-10-01T09:54:02.319000+00:00</published>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-75786</id>
    <title>CVE-2026-75786 (PandoraFMS)</title>
    <updated>2026-10-01T09:30:48.977000+00:00</updated>
    <content>SQL Injection in Grafana Integration Endpoint (query.php)</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-75786"/>
    <summary>SQL Injection in Grafana Integration Endpoint (query.php)</summary>
    <published>2026-10-01T09:30:48.977000+00:00</published>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-64950</id>
    <title>CVE-2026-64950 (PandoraFMS)</title>
    <updated>2026-10-01T09:30:09.661000+00:00</updated>
    <content>Stored Cross-Site Scripting via Directory Name in File Manager Create Directory</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-64950"/>
    <summary>Stored Cross-Site Scripting via Directory Name in File Manager Create Directory</summary>
    <published>2026-10-01T09:30:09.661000+00:00</published>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-64949</id>
    <title>CVE-2026-64949 (PandoraFMS)</title>
    <updated>2026-10-01T09:29:30.649000+00:00</updated>
    <content>Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-64949"/>
    <summary>Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager</summary>
    <published>2026-10-01T09:29:30.649000+00:00</published>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-64948</id>
    <title>CVE-2026-64948 (PandoraFMS)</title>
    <updated>2026-10-01T09:28:33.626000+00:00</updated>
    <content>Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-64948"/>
    <summary>Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure</summary>
    <published>2026-10-01T09:28:33.626000+00:00</published>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cve-2026-64947</id>
    <title>CVE-2026-64947 (PandoraFMS)</title>
    <updated>2026-10-01T09:27:46.696000+00:00</updated>
    <content>CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager</content>
    <link href="https://cve.radiocsirt.org/vuln/cve-2026-64947"/>
    <summary>CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager</summary>
    <published>2026-10-01T09:27:46.696000+00:00</published>
  </entry>
</feed>
