https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T00:48:52.720065+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-247832 EUVD-2026-247832 2026-10-05T00:48:52.871591+00:00 EUVD-2026-247832 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41921 fkie_cve-2024-41921 2026-10-05T00:48:52.871630+00:00

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS topic and accepts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function without sanitization, allowing a local user to craft and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-7mg9-54m6-qh35 GHSA-7mg9-54m6-qh35 2026-10-05T00:48:52.871665+00:00

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS topic and accepts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function without sanitization, allowing a local user to craft and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-41921 UBUNTU-CVE-2024-41921 2026-10-05T00:48:52.871683+00:00

Affected: Ubuntu:16.04:LTS: ros-ros-comm, Ubuntu:18.04:LTS: ros-ros-comm, Ubuntu:20.04:LTS: ros-ros-comm, Ubuntu:22.04:LTS: ros-ros-comm

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS topic and accepts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function without sanitization, allowing a local user to craft and execute arbitrary code.