https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:41:55.376599+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-247831 EUVD-2026-247831 2026-10-04T06:41:55.379455+00:00 EUVD-2026-247831 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41148 fkie_cve-2024-41148 2026-10-04T06:41:55.379487+00:00

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic and accepts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function without sanitization, allowing a local user to craft and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-f577-ch35-2wcx GHSA-f577-ch35-2wcx 2026-10-04T06:41:55.379520+00:00

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic and accepts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function without sanitization, allowing a local user to craft and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-41148 UBUNTU-CVE-2024-41148 2026-10-04T06:41:55.379539+00:00

Affected: Ubuntu:16.04:LTS: ros-ros-comm, Ubuntu:18.04:LTS: ros-ros-comm, Ubuntu:20.04:LTS: ros-ros-comm, Ubuntu:22.04:LTS: ros-ros-comm

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic and accepts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function without sanitization, allowing a local user to craft and execute arbitrary code.