https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:34:59.235308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04646 bdu:2021-04646 2026-10-04T00:34:59.329561+00:00 bdu:2021-04646 https://cve.radiocsirt.org/vuln/euvd-2026-48130 EUVD-2026-48130 2026-10-04T00:34:59.329599+00:00 EUVD-2026-48130 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36389 fkie_cve-2020-36389 2026-10-04T00:34:59.329615+00:00

In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.

 https://cve.radiocsirt.org/vuln/ghsa-pxgv-6gmm-ggxw GHSA-pxgv-6gmm-ggxw 2026-10-04T00:34:59.329644+00:00

In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.

 https://cve.radiocsirt.org/vuln/gsd-2020-36389 gsd-2020-36389 2026-10-04T00:34:59.329659+00:00 gsd-2020-36389 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36389 UBUNTU-CVE-2020-36389 2026-10-04T00:34:59.329669+00:00

Affected: Ubuntu:Pro:16.04:LTS: civicrm, Ubuntu:Pro:18.04:LTS: civicrm, Ubuntu:Pro:20.04:LTS: civicrm

In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.