https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:23:11.991917+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-09803 cnvd-2021-09803 2026-10-08T21:23:12.061109+00:00 cnvd-2021-09803 https://cve.radiocsirt.org/vuln/euvd-2026-42994 EUVD-2026-42994 2026-10-08T21:23:12.061151+00:00 EUVD-2026-42994 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15568 fkie_cve-2020-15568 2026-10-08T21:23:12.061167+00:00

TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with (for example) OS commands in the opt parameter.

 https://cve.radiocsirt.org/vuln/ghsa-j542-2x58-5jg4 GHSA-j542-2x58-5jg4 2026-10-08T21:23:12.061198+00:00

TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with (for example) OS commands in the opt parameter.

 https://cve.radiocsirt.org/vuln/gsd-2020-15568 gsd-2020-15568 2026-10-08T21:23:12.061214+00:00 gsd-2020-15568