https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:04:01.281418+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-207271 EUVD-2026-207271 2026-10-05T22:04:01.351671+00:00 EUVD-2026-207271 https://cve.radiocsirt.org/vuln/fkie_cve-2023-35811 fkie_cve-2023-35811 2026-10-05T22:04:01.351708+00:00

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the REST API. By using crafted requests, custom SQL code can be injected through the REST API because of missing input validation. Regular user privileges can use used for exploitation. Editions other than Enterprise are also affected.

 https://cve.radiocsirt.org/vuln/ghsa-hxx9-xh5r-fc5x GHSA-hxx9-xh5r-fc5x 2026-10-05T22:04:01.351743+00:00

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the REST API. By using crafted requests, custom SQL code can be injected through the REST API because of missing input validation. Regular user privileges can use used for exploitation. Editions other than Enterprise are also affected.

 https://cve.radiocsirt.org/vuln/gsd-2023-35811 gsd-2023-35811 2026-10-05T22:04:01.351761+00:00 gsd-2023-35811 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1499 WID-SEC-W-2023-1499 — SugarCRM Sugar Enterprise: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-05T22:04:01.351772+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SugarCRM Sugar Enterprise ausnutzen, um beliebigen Programmcode auszuführen.