https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:25:12.372255+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-20207 cnvd-2021-20207 2026-10-05T02:25:12.473193+00:00 cnvd-2021-20207 https://cve.radiocsirt.org/vuln/euvd-2026-42911 EUVD-2026-42911 2026-10-05T02:25:12.473239+00:00 EUVD-2026-42911 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15400 fkie_cve-2020-15400 2026-10-05T02:25:12.473255+00:00

CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.

 https://cve.radiocsirt.org/vuln/ghsa-j33j-fg2g-mcv2 GHSA-j33j-fg2g-mcv2 — Cross-Site Request Forgery in CakePHP 2026-10-05T02:25:12.473283+00:00

Affected: Packagist: cakephp/cakephp

CakePHP before 4.0.6 and 3.10.3 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.

 https://cve.radiocsirt.org/vuln/gsd-2020-15400 gsd-2020-15400 2026-10-05T02:25:12.473309+00:00 gsd-2020-15400 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15400 UBUNTU-CVE-2020-15400 2026-10-05T02:25:12.473321+00:00

Affected: Ubuntu:16.04:LTS: cakephp, Ubuntu:20.04:LTS: cakephp, Ubuntu:22.04:LTS: cakephp

CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.