https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T13:52:35.844248+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-221706 EUVD-2026-221706 2026-10-10T13:52:35.905359+00:00 EUVD-2026-221706 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32828 fkie_cve-2021-32828 2026-10-10T13:52:35.905395+00:00

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the `oauth2` REST API is vulnerable to Reflected Cross-Site Scripting (XSS). This XSS can be escalated to Remote Code Execution (RCE) by levering the automation API.

 https://cve.radiocsirt.org/vuln/ghsa-x347-fc9w-w7c3 GHSA-x347-fc9w-w7c3 — Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution 2026-10-10T13:52:35.905429+00:00

Affected: Maven: org.nuxeo.ecm.platform:nuxeo-platform-oauth

The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the `oauth2` REST API is vulnerable to Reflected Cross-Site Scripting (XSS). This XSS can be escalated to Remote Code Execution (RCE) by levering the automation API.

 https://cve.radiocsirt.org/vuln/gsd-2021-32828 gsd-2021-32828 2026-10-10T13:52:35.905454+00:00 gsd-2021-32828