https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T19:07:38.555190+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-74575 EUVD-2026-74575 2026-10-20T19:07:38.561548+00:00 EUVD-2026-74575 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7282 fkie_cve-2017-7282 2026-10-20T19:07:38.561594+00:00

An issue was discovered in Unitrends Enterprise Backup before 9.1.1. The function downloadFile in api/includes/restore.php blindly accepts any filename passed to /api/restore/download as valid. This allows an authenticated attacker to read any file in the filesystem that the web server has access to, aka Local File Inclusion (LFI).

 https://cve.radiocsirt.org/vuln/ghsa-47pr-r85w-jwxj GHSA-47pr-r85w-jwxj 2026-10-20T19:07:38.561638+00:00

An issue was discovered in Unitrends Enterprise Backup before 9.1.1. The function downloadFile in api/includes/restore.php blindly accepts any filename passed to /api/restore/download as valid. This allows an authenticated attacker to read any file in the filesystem that the web server has access to, aka Local File Inclusion (LFI).

 https://cve.radiocsirt.org/vuln/gsd-2017-7282 gsd-2017-7282 2026-10-20T19:07:38.561666+00:00 gsd-2017-7282