https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T18:47:33.293824+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-23052 cnvd-2020-23052 2026-10-23T18:47:33.354723+00:00 cnvd-2020-23052 https://cve.radiocsirt.org/vuln/euvd-2026-40068 EUVD-2026-40068 2026-10-23T18:47:33.354761+00:00 EUVD-2026-40068 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10806 fkie_cve-2020-10806 2026-10-23T18:47:33.354776+00:00

eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.

 https://cve.radiocsirt.org/vuln/ghsa-54p5-gxq6-j98g GHSA-54p5-gxq6-j98g — eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type 2026-10-23T18:47:33.354806+00:00

Affected: Packagist: ezsystems/ezpublish-kernel, Packagist: ezsystems/ezpublish-legacy

eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.

 https://cve.radiocsirt.org/vuln/gsd-2020-10806 gsd-2020-10806 2026-10-23T18:47:33.354834+00:00 gsd-2020-10806