https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:00:45.846618+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-01767 bdu:2023-01767 2026-10-06T06:00:45.850605+00:00 bdu:2023-01767 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0227 certfr-2023-avi-0227 — De multiples vulnérabilités ont été découvertes dans les produits <span class="textit">Adobe</span>. Elles permettent à… 2026-10-06T06:00:45.850650+00:00 certfr-2023-avi-0227 https://cve.radiocsirt.org/vuln/euvd-2026-220861 EUVD-2026-220861 2026-10-06T06:00:45.850672+00:00 EUVD-2026-220861 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22247 fkie_cve-2023-22247 2026-10-06T06:00:45.850684+00:00

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

 https://cve.radiocsirt.org/vuln/ghsa-2444-8gj8-6fmx GHSA-2444-8gj8-6fmx — Magento Open Source allows XML Injection 2026-10-06T06:00:45.850711+00:00

Affected: Packagist: magento/community-edition, Packagist: magento/project-community-edition

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

 https://cve.radiocsirt.org/vuln/gsd-2023-22247 gsd-2023-22247 2026-10-06T06:00:45.850737+00:00 gsd-2023-22247 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0652 WID-SEC-W-2023-0652 — Adobe Magento: Mehrere Schwachstellen 2026-10-06T06:00:45.850748+00:00

Ein Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.