https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:53:40.186867+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-9694 EUVD-2026-9694 2026-10-05T06:53:40.189513+00:00 EUVD-2026-9694 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45280 fkie_cve-2023-45280 2026-10-05T06:53:40.189544+00:00

Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload an HTML file containing arbitrary JavaScript and then navigate to it. Once the user opens the file, the browser will execute the arbitrary JavaScript.

 https://cve.radiocsirt.org/vuln/ghsa-643f-hpcc-2gv8 GHSA-643f-hpcc-2gv8 — Yamcs Cross-site Scripting vulnerability 2026-10-05T06:53:40.189575+00:00

Affected: Maven: org.yamcs:yamcs

Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload an HTML file containing arbitrary JavaScript and then navigate to it. Once the user opens the file, the browser will execute the arbitrary JavaScript.

 https://cve.radiocsirt.org/vuln/gsd-2023-45280 gsd-2023-45280 2026-10-05T06:53:40.189599+00:00 gsd-2023-45280