https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:51:37.019599+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-92462 cnvd-2021-92462 2026-10-05T18:51:37.023529+00:00 cnvd-2021-92462 https://cve.radiocsirt.org/vuln/euvd-2026-31591 EUVD-2026-31591 2026-10-05T18:51:37.023589+00:00 EUVD-2026-31591 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41243 fkie_cve-2021-41243 2026-10-05T18:51:37.023604+00:00

There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to upload files may upload crafted zip files which may execute arbitrary commands on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

 https://cve.radiocsirt.org/vuln/ghsa-7rpc-9m88-cf9w GHSA-7rpc-9m88-cf9w — OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS 2026-10-05T18:51:37.023648+00:00

Affected: Packagist: baserproject/basercms

There is an OS Command Injection Vulnerability on the management system of baserCMS.

This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

Target baserCMS 4.5.3 and earlier versions

Vulnerability OS Command Injection Vulnerability.

Countermeasures Update to the latest version of baserCMS

Credits Akagi Yusuke @NTT-ME

 https://cve.radiocsirt.org/vuln/gsd-2021-41243 gsd-2021-41243 2026-10-05T18:51:37.023676+00:00 gsd-2021-41243 https://cve.radiocsirt.org/vuln/jvndb-2021-000106 jvndb-2021-000106 2026-10-05T18:51:37.023688+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. * OS command injection (CWE-78) - CVE-2021-41243 * Arbitrary code upload vulnerability in Database restore (CWE-434) - CVE-2021-41279 CVE-2021-41243 Akagi Yusuke of NTT-ME CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-41279 Daniele Scanu of SoterITSecurity reported this vulnerability to baserCMS Users Community and baserCMS Users Community reported it to JPCERT/CC to notify users of the solution through JVN.