https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:10:06.044682+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00007 bdu:2025-00007 2026-10-04T03:10:06.106398+00:00 bdu:2025-00007 https://cve.radiocsirt.org/vuln/cnvd-2024-49205 cnvd-2024-49205 2026-10-04T03:10:06.106439+00:00 cnvd-2024-49205 https://cve.radiocsirt.org/vuln/euvd-2026-255578 EUVD-2026-255578 2026-10-04T03:10:06.106454+00:00 EUVD-2026-255578 https://cve.radiocsirt.org/vuln/fkie_cve-2024-56145 fkie_cve-2024-56145 2026-10-04T03:10:06.106465+00:00

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue.

 https://cve.radiocsirt.org/vuln/ghsa-2p6p-9rc9-62j9 GHSA-2p6p-9rc9-62j9 — Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled 2026-10-04T03:10:06.106495+00:00

Affected: Packagist: craftcms/cms

### Impact You are affected if your php.ini configuration has `register_argc_argv` enabled.

### Patches Update to 3.9.14, 4.13.2, or 5.5.2.

### Workarounds If you can't upgrade yet, and `register_argc_argv` is enabled, you can disable it to mitigate the issue.