https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T01:35:17.062507+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-19774 cnvd-2021-19774 2026-10-13T01:35:17.068743+00:00 cnvd-2021-19774 https://cve.radiocsirt.org/vuln/euvd-2026-42883 EUVD-2026-42883 2026-10-13T01:35:17.068771+00:00 EUVD-2026-42883 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15397 fkie_cve-2020-15397 2026-10-13T01:35:17.068784+00:00

HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).

 https://cve.radiocsirt.org/vuln/ghsa-2fqh-mw2q-wr69 GHSA-2fqh-mw2q-wr69 2026-10-13T01:35:17.068810+00:00

HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).

 https://cve.radiocsirt.org/vuln/gsd-2020-15397 gsd-2020-15397 2026-10-13T01:35:17.068826+00:00 gsd-2020-15397 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1209-1 openSUSE-SU-2020:1209-1 — Security update for hylafax+ 2026-10-13T01:35:17.068836+00:00

Security update for hylafax+

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15397 UBUNTU-CVE-2020-15397 2026-10-13T01:35:17.068852+00:00

Affected: Ubuntu:16.04:LTS: hylafax, Ubuntu:18.04:LTS: hylafax, Ubuntu:20.04:LTS: hylafax, Ubuntu:22.04:LTS: hylafax, Ubuntu:24.04:LTS: hylafax, Ubuntu:25.10: hylafax, Ubuntu:26.04:LTS: hylafax

HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).