https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T06:57:21.655277+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-17688 EUVD-2026-17688 2026-10-21T06:57:21.658882+00:00 EUVD-2026-17688 https://cve.radiocsirt.org/vuln/fkie_cve-2022-33941 fkie_cve-2022-33941 2026-10-21T06:57:21.658925+00:00

PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products/versions are as follows: PowerCMS 6.021 and earlier (PowerCMS 6 Series), PowerCMS 5.21 and earlier (PowerCMS 5 Series), and PowerCMS 4.51 and earlier (PowerCMS 4 Series). Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-3gg6-g739-g8w9 GHSA-3gg6-g739-g8w9 2026-10-21T06:57:21.658975+00:00

PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products/versions are as follows: PowerCMS 6.021 and earlier (PowerCMS 6 Series), PowerCMS 5.21 and earlier (PowerCMS 5 Series), and PowerCMS 4.51 and earlier (PowerCMS 4 Series). Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2022-33941 gsd-2022-33941 2026-10-21T06:57:21.659005+00:00 gsd-2022-33941 https://cve.radiocsirt.org/vuln/jvndb-2022-000069 jvndb-2022-000069 2026-10-21T06:57:21.659024+00:00

PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability (CWE-74). Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. According to the developer, it is unable to execute a command with an arbitrary value added to its argument, even if the vulnerability is exploited. Alfasado Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Alfasado Inc. coordinated under the Information Security Early Warning Partnership.