https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T01:34:48.058776+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-70027 EUVD-2026-70027 2026-10-26T01:34:48.061417+00:00 EUVD-2026-70027 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19908 fkie_cve-2018-19908 2026-10-26T01:34:48.061447+00:00

An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import code), an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filename of the STIX import.

 https://cve.radiocsirt.org/vuln/ghsa-2g5q-p9pf-crp5 GHSA-2g5q-p9pf-crp5 2026-10-26T01:34:48.061477+00:00

An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import code), an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filename of the STIX import.

 https://cve.radiocsirt.org/vuln/gsd-2018-19908 gsd-2018-19908 2026-10-26T01:34:48.061494+00:00 gsd-2018-19908