https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:14:34.678235+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-149074 EUVD-2026-149074 2026-10-09T18:14:34.680798+00:00 EUVD-2026-149074 https://cve.radiocsirt.org/vuln/fkie_cve-2005-4559 fkie_cve-2005-4559 2026-10-09T18:14:34.680828+00:00

mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout and layout_settings variables when an unrecognized HTTP_USER_AGENT string is provided, which allows remote attackers to access arbitrary files via a request with an unrecognized User Agent that also specifies the desired default_layout and layout_settings parameters.

 https://cve.radiocsirt.org/vuln/ghsa-v4m4-f9f5-pvcm GHSA-v4m4-f9f5-pvcm 2026-10-09T18:14:34.680858+00:00

mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout and layout_settings variables when an unrecognized HTTP_USER_AGENT string is provided, which allows remote attackers to access arbitrary files via a request with an unrecognized User Agent that also specifies the desired default_layout and layout_settings parameters.

 https://cve.radiocsirt.org/vuln/gsd-2005-4559 gsd-2005-4559 2026-10-09T18:14:34.680876+00:00 gsd-2005-4559