https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:42:49.213826+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-01467 bdu:2026-01467 2026-10-04T17:42:49.277739+00:00 bdu:2026-01467 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0667 certfr-2026-avi-0667 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T17:42:49.277779+00:00 certfr-2026-avi-0667 https://cve.radiocsirt.org/vuln/euvd-2026-271897 EUVD-2026-271897 2026-10-04T17:42:49.277799+00:00 EUVD-2026-271897 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11953 fkie_cve-2025-11953 2026-10-04T17:42:49.277811+00:00

The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments.

 https://cve.radiocsirt.org/vuln/ghsa-399j-vxmf-hjvr GHSA-399j-vxmf-hjvr — @react-native-community/cli has arbitrary OS command injection 2026-10-04T17:42:49.277843+00:00

Affected: npm: @react-native-community/cli, npm: @react-native-community/cli-server-api

The Metro Development Server, which is opened by the React Native CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments.