https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T15:24:27.297885+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-130501 EUVD-2026-130501 2026-10-15T15:24:27.301858+00:00 EUVD-2026-130501 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5619 fkie_cve-2008-5619 2026-10-15T15:24:27.301902+00:00

html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.

 https://cve.radiocsirt.org/vuln/ghsa-v5c9-mmw9-829q GHSA-v5c9-mmw9-829q — PHPMailer susceptible to arbitrary code execution 2026-10-15T15:24:27.301945+00:00

Affected: Packagist: phpmailer/phpmailer

html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.

 https://cve.radiocsirt.org/vuln/gsd-2008-5619 gsd-2008-5619 2026-10-15T15:24:27.301982+00:00 gsd-2008-5619