https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:26:45.905536+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-165504 EUVD-2026-165504 2026-10-05T07:26:45.971317+00:00 EUVD-2026-165504 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4399 fkie_cve-2012-4399 2026-10-05T07:26:45.971364+00:00

The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

 https://cve.radiocsirt.org/vuln/ghsa-5964-pq8r-4q62 GHSA-5964-pq8r-4q62 — CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references 2026-10-05T07:26:45.971407+00:00

Affected: Packagist: cakephp/cakephp

The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

 https://cve.radiocsirt.org/vuln/gsd-2012-4399 gsd-2012-4399 2026-10-05T07:26:45.971444+00:00 gsd-2012-4399