https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:52:45.767186+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07942 bdu:2023-07942 2026-10-05T16:52:45.851169+00:00 bdu:2023-07942 https://cve.radiocsirt.org/vuln/euvd-2026-255683 EUVD-2026-255683 2026-10-05T16:52:45.851225+00:00 EUVD-2026-255683 https://cve.radiocsirt.org/vuln/fkie_cve-2023-48365 fkie_cve-2023-48365 2026-10-05T16:52:45.851242+00:00

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.

 https://cve.radiocsirt.org/vuln/ghsa-2cxf-f44j-gqqf GHSA-2cxf-f44j-gqqf 2026-10-05T16:52:45.851279+00:00

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.

 https://cve.radiocsirt.org/vuln/gsd-2023-48365 gsd-2023-48365 2026-10-05T16:52:45.851313+00:00 gsd-2023-48365 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0053 WID-SEC-W-2025-0053 — Qlik Sense: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2026-10-05T16:52:45.851326+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Qlik Sense ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.