https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:31:51.157142+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-06536 cnvd-2022-06536 2026-10-05T13:31:51.238342+00:00 cnvd-2022-06536 https://cve.radiocsirt.org/vuln/euvd-2026-47319 EUVD-2026-47319 2026-10-05T13:31:51.238383+00:00 EUVD-2026-47319 https://cve.radiocsirt.org/vuln/fkie_cve-2020-29390 fkie_cve-2020-29390 2026-10-05T13:31:51.238397+00:00

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character.

 https://cve.radiocsirt.org/vuln/ghsa-wfh6-xhqh-h5xw GHSA-wfh6-xhqh-h5xw 2026-10-05T13:31:51.238428+00:00

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character.

 https://cve.radiocsirt.org/vuln/gsd-2020-29390 gsd-2020-29390 2026-10-05T13:31:51.238444+00:00 gsd-2020-29390 https://cve.radiocsirt.org/vuln/jvndb-2020-013805 jvndb-2020-013805 2026-10-05T13:31:51.238455+00:00

The web interface of Zeroshell, Linux distribution provided by Zeroshell.org, contains an OS command injection vulnerability (CWE-78). Hirukawa Norihiko of MYT Consulting Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.