https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:20:55.091196+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-33603 cnvd-2022-33603 2026-10-04T08:20:55.094461+00:00 cnvd-2022-33603 https://cve.radiocsirt.org/vuln/euvd-2026-13700 EUVD-2026-13700 2026-10-04T08:20:55.094493+00:00 EUVD-2026-13700 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23048 fkie_cve-2022-23048 2026-10-04T08:20:55.094507+00:00

Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After upload it, the PHP file will be placed at "themes/simpletheme/{rce}.php" from where can be accessed in order to execute commands.

 https://cve.radiocsirt.org/vuln/ghsa-5r4j-gp4j-q9p2 GHSA-5r4j-gp4j-q9p2 2026-10-04T08:20:55.094535+00:00

Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After upload it, the PHP file will be placed at "themes/simpletheme/{rce}.php" from where can be accessed in order to execute commands.

 https://cve.radiocsirt.org/vuln/gsd-2022-23048 gsd-2022-23048 2026-10-04T08:20:55.094552+00:00 gsd-2022-23048