https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:42:12.863447+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-42743 EUVD-2026-42743 2026-10-07T20:42:12.869418+00:00 EUVD-2026-42743 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15227 fkie_cve-2020-15227 2026-10-07T20:42:12.869465+00:00

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.

 https://cve.radiocsirt.org/vuln/ghsa-8gv3-3j7f-wg94 GHSA-8gv3-3j7f-wg94 — Potential Remote Code Execution vulnerability 2026-10-07T20:42:12.869511+00:00

Affected: Packagist: nette/application

Packages nette/application versions prior to 2.2.10, 2.3.14, 2.4.16, 3.0.6 and nette/nette versions prior to 2.0.19 and 2.1.13 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE.

Reported by Cyku Hong from DEVCORE (https://devco.re)

### Impact Code injection, possible remote code execution.

### Patches Fixed in nette/application 2.2.10, 2.3.14, 2.4.16, 3.0.6 and nette/nette 2.0.19 and 2.1.13

 https://cve.radiocsirt.org/vuln/gsd-2020-15227 gsd-2020-15227 2026-10-07T20:42:12.869566+00:00 gsd-2020-15227 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15227 UBUNTU-CVE-2020-15227 2026-10-07T20:42:12.869587+00:00

Affected: Ubuntu:Pro:16.04:LTS: php-nette, Ubuntu:18.04:LTS: php-nette

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.