https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:43:42.119725+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234400 EUVD-2026-234400 2026-10-03T09:43:42.188701+00:00 EUVD-2026-234400 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24711 fkie_cve-2022-24711 2026-10-03T09:43:42.188738+00:00

CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. Prior to version 4.1.9, an improper input validation vulnerability allows attackers to execute CLI routes via HTTP request. Version 4.1.9 contains a patch. There are currently no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-xjp4-6w75-qrj7 GHSA-xjp4-6w75-qrj7 — Remote CLI Command Execution Vulnerability in CodeIgniter4 2026-10-03T09:43:42.188771+00:00

Affected: Packagist: codeigniter4/framework

### Impact This vulnerability allows attackers to execute CLI routes via HTTP request.

### Patches Upgrade to v4.1.9 or later.

### Workarounds None.

### For more information If you have any questions or comments about this advisory: * Open an issue in [codeigniter4/CodeIgniter4](https://github.com/codeigniter4/CodeIgniter4/issues) * Email us at [SECURITY.md](https://github.com/codeigniter4/CodeIgniter4/blob/develop/SECURITY.md)

 https://cve.radiocsirt.org/vuln/gsd-2022-24711 gsd-2022-24711 2026-10-03T09:43:42.188801+00:00 gsd-2022-24711