https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:30:07.618072+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-159677 EUVD-2026-159677 2026-10-02T19:30:07.683239+00:00 EUVD-2026-159677 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29686 fkie_cve-2024-29686 2026-10-02T19:30:07.683275+00:00

Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components. NOTE: the vendor disputes this because the payload could only be entered by a trusted user, such as the owner of the server that hosts Winter CMS, or a developer working for them.

 https://cve.radiocsirt.org/vuln/ghsa-8r5j-gm3j-cx9c GHSA-8r5j-gm3j-cx9c — Winter CMS Server-Side Template Injection (SSTI) vulnerability 2026-10-02T19:30:07.683308+00:00

Affected: Packagist: wintercms/winter

Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components.

 https://cve.radiocsirt.org/vuln/gsd-2024-29686 gsd-2024-29686 2026-10-02T19:30:07.683332+00:00 gsd-2024-29686