https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T22:25:52.097084+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-42335 EUVD-2026-42335 2026-10-23T22:25:52.180124+00:00 EUVD-2026-42335 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14209 fkie_cve-2020-14209 2026-10-23T22:25:52.180170+00:00

Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control (e.g., to let .noexe files be executed as PHP code to defeat the .noexe protection mechanism).

 https://cve.radiocsirt.org/vuln/ghsa-2gcp-xwxg-hqg3 GHSA-2gcp-xwxg-hqg3 — Dolibarr Unrestricted Upload of File with Dangerous Type 2026-10-23T22:25:52.180204+00:00

Affected: Packagist: dolibarr/dolibarr

Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control (e.g., to let .noexe files be executed as PHP code to defeat the .noexe protection mechanism).

 https://cve.radiocsirt.org/vuln/gsd-2020-14209 gsd-2020-14209 2026-10-23T22:25:52.180231+00:00 gsd-2020-14209 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14209 UBUNTU-CVE-2020-14209 2026-10-23T22:25:52.180245+00:00

Affected: Ubuntu:Pro:16.04:LTS: dolibarr

Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control (e.g., to let .noexe files be executed as PHP code to defeat the .noexe protection mechanism).