https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:15:34.540981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-15052 EUVD-2026-15052 2026-10-05T03:15:34.545485+00:00 EUVD-2026-15052 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26661 fkie_cve-2022-26661 2026-10-05T03:15:34.545515+00:00

An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.

 https://cve.radiocsirt.org/vuln/ghsa-cj78-rgw3-4h5p GHSA-cj78-rgw3-4h5p — Improper Restriction of XML External Entity Reference in trytond and proteus 2026-10-05T03:15:34.545546+00:00

Affected: PyPI: trytond, PyPI: proteus

An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.

 https://cve.radiocsirt.org/vuln/gsd-2022-26661 gsd-2022-26661 2026-10-05T03:15:34.545574+00:00 gsd-2022-26661 https://cve.radiocsirt.org/vuln/pysec-2022-43170 PYSEC-2022-43170 2026-10-05T03:15:34.545587+00:00

Affected: PyPI: tryton

An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-26661 UBUNTU-CVE-2022-26661 2026-10-05T03:15:34.545606+00:00

Affected: Ubuntu:16.04:LTS: tryton-proteus, Ubuntu:16.04:LTS: tryton-server, Ubuntu:18.04:LTS: tryton-proteus, Ubuntu:18.04:LTS: tryton-server, Ubuntu:20.04:LTS: tryton-proteus, Ubuntu:20.04:LTS: tryton-server, Ubuntu:22.04:LTS: tryton-proteus, Ubuntu:22.04:LTS: tryton-server, Ubuntu:24.04:LTS: tryton-proteus, Ubuntu:24.04:LTS: tryton-server and 4 more

An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.