https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:22:02.434833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-31353 EUVD-2026-31353 2026-10-03T21:22:02.509979+00:00 EUVD-2026-31353 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40845 fkie_cve-2021-40845 2026-10-03T21:22:02.510021+00:00

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.

 https://cve.radiocsirt.org/vuln/ghsa-x75m-rrhq-6j68 GHSA-x75m-rrhq-6j68 2026-10-03T21:22:02.510058+00:00

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.

 https://cve.radiocsirt.org/vuln/gsd-2021-40845 gsd-2021-40845 2026-10-03T21:22:02.510076+00:00 gsd-2021-40845