https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T07:47:17.253169+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-32254 EUVD-2026-32254 2026-10-23T07:47:17.320952+00:00 EUVD-2026-32254 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42840 fkie_cve-2021-42840 2026-10-23T07:47:17.320989+00:00

SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can refer to an attacker-controlled PHP file under the web root, because only the all-lowercase PHP file extensions were blocked. NOTE: this issue exists because of an incomplete fix for CVE-2020-28328.

 https://cve.radiocsirt.org/vuln/ghsa-9rqh-fr4c-99v2 GHSA-9rqh-fr4c-99v2 2026-10-23T07:47:17.321023+00:00

SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can refer to an attacker-controlled PHP file under the web root, because only the all-lowercase PHP file extensions were blocked. NOTE: this issue exists because of an incomplete fix for CVE-2020-28328.

 https://cve.radiocsirt.org/vuln/gsd-2021-42840 gsd-2021-42840 2026-10-23T07:47:17.321041+00:00 gsd-2021-42840