https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:34:13.998383+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02726 bdu:2022-02726 2026-10-04T19:34:14.100375+00:00 bdu:2022-02726 https://cve.radiocsirt.org/vuln/certfr-2022-avi-332 certfr-2022-avi-332 — Une vulnérabilité a été découvertes dan Apache Struts. Elle permet à un attaquant de provoquer une exécution de code ar… 2026-10-04T19:34:14.100442+00:00 certfr-2022-avi-332 https://cve.radiocsirt.org/vuln/cnvd-2023-02478 cnvd-2023-02478 2026-10-04T19:34:14.100484+00:00 cnvd-2023-02478 https://cve.radiocsirt.org/vuln/euvd-2026-27658 EUVD-2026-27658 2026-10-04T19:34:14.100503+00:00 EUVD-2026-27658 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31805 fkie_cve-2021-31805 2026-10-04T19:34:14.100521+00:00

The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code Execution and security degradation.

 https://cve.radiocsirt.org/vuln/ghsa-v8j6-6c2r-r27c GHSA-v8j6-6c2r-r27c — Expression Language Injection in Apache Struts 2026-10-04T19:34:14.100567+00:00

Affected: Maven: org.apache.struts:struts2-core

The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code Execution and security degradation.

 https://cve.radiocsirt.org/vuln/gsd-2021-31805 gsd-2021-31805 2026-10-04T19:34:14.100607+00:00 gsd-2021-31805 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0735 WID-SEC-W-2022-0735 — Oracle MySQL: Mehrere Schwachstellen 2026-10-04T19:34:14.100626+00:00

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.