https://cve.radiocsirt.org Latest vulnerabilities published by the CNAs operating under the INCIBE root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 07:10:14 +0000 https://cve.radiocsirt.org/vuln/cve-2026-102514 Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive https://cve.radiocsirt.org/vuln/cve-2026-102514 Thu, 01 Oct 2026 20:00:51 +0000 https://cve.radiocsirt.org/vuln/cve-2026-7176 Multiple vulnerabilities in Entradium by Crocantickets Multiple vulnerabilities in Entradium by Crocantickets https://cve.radiocsirt.org/vuln/cve-2026-7176 Thu, 01 Oct 2026 09:54:26 +0000 https://cve.radiocsirt.org/vuln/cve-2026-7175 Multiple vulnerabilities in Entradium by Crocantickets Multiple vulnerabilities in Entradium by Crocantickets https://cve.radiocsirt.org/vuln/cve-2026-7175 Thu, 01 Oct 2026 09:54:19 +0000 https://cve.radiocsirt.org/vuln/cve-2026-7174 Multiple vulnerabilities in Entradium by Crocantickets Multiple vulnerabilities in Entradium by Crocantickets https://cve.radiocsirt.org/vuln/cve-2026-7174 Thu, 01 Oct 2026 09:54:10 +0000 https://cve.radiocsirt.org/vuln/cve-2026-7173 Multiple vulnerabilities in Entradium by Crocantickets Multiple vulnerabilities in Entradium by Crocantickets https://cve.radiocsirt.org/vuln/cve-2026-7173 Thu, 01 Oct 2026 09:54:02 +0000 https://cve.radiocsirt.org/vuln/cve-2026-75786 SQL Injection in Grafana Integration Endpoint (query.php) SQL Injection in Grafana Integration Endpoint (query.php) https://cve.radiocsirt.org/vuln/cve-2026-75786 Thu, 01 Oct 2026 09:30:48 +0000 https://cve.radiocsirt.org/vuln/cve-2026-64950 Stored Cross-Site Scripting via Directory Name in File Manager Create Directory Stored Cross-Site Scripting via Directory Name in File Manager Create Directory https://cve.radiocsirt.org/vuln/cve-2026-64950 Thu, 01 Oct 2026 09:30:09 +0000 https://cve.radiocsirt.org/vuln/cve-2026-64949 Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager https://cve.radiocsirt.org/vuln/cve-2026-64949 Thu, 01 Oct 2026 09:29:30 +0000 https://cve.radiocsirt.org/vuln/cve-2026-64948 Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure https://cve.radiocsirt.org/vuln/cve-2026-64948 Thu, 01 Oct 2026 09:28:33 +0000 https://cve.radiocsirt.org/vuln/cve-2026-64947 CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager https://cve.radiocsirt.org/vuln/cve-2026-64947 Thu, 01 Oct 2026 09:27:46 +0000