https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:34:06.641642+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-37765 cnvd-2021-37765 2026-10-02T22:34:06.715769+00:00 cnvd-2021-37765 https://cve.radiocsirt.org/vuln/euvd-2026-26477 EUVD-2026-26477 2026-10-02T22:34:06.715813+00:00 EUVD-2026-26477 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29641 fkie_cve-2021-29641 2026-10-02T22:34:06.715829+00:00

Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain installations with the Apache HTTP Server and the local-storage driver (e.g., when the product was obtained from hub.docker.com).

 https://cve.radiocsirt.org/vuln/ghsa-cfr5-vjc2-p7gj GHSA-cfr5-vjc2-p7gj 2026-10-02T22:34:06.715863+00:00

Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain installations with the Apache HTTP Server and the local-storage driver (e.g., when the product was obtained from hub.docker.com).

 https://cve.radiocsirt.org/vuln/gsd-2021-29641 gsd-2021-29641 2026-10-02T22:34:06.715882+00:00 gsd-2021-29641