https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T21:07:30.534874+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-14214 cnvd-2018-14214 2026-10-21T21:07:30.625020+00:00 cnvd-2018-14214 https://cve.radiocsirt.org/vuln/euvd-2026-177364 EUVD-2026-177364 2026-10-21T21:07:30.625059+00:00 EUVD-2026-177364 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1999009 fkie_cve-2018-1999009 2026-10-21T21:07:30.625074+00:00

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function) that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend path is accessible. This vulnerability appears to have been fixed in Build 437.

 https://cve.radiocsirt.org/vuln/ghsa-v7cr-w5v6-6659 GHSA-v7cr-w5v6-6659 — October CMS Local File Inclusion 2026-10-21T21:07:30.625105+00:00

Affected: Packagist: october/october

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in [modules/system/traits/ViewMaker.php](https://github.com/octobercms/october/blob/v1.0.436/modules/system/traits/ViewMaker.php#L244) (makeFileContents function) that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend path is accessible. This vulnerability appears to have been fixed in Build 437.

 https://cve.radiocsirt.org/vuln/gsd-2018-1999009 gsd-2018-1999009 2026-10-21T21:07:30.625131+00:00 gsd-2018-1999009