https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:28:35.968591+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262315 EUVD-2026-262315 2026-10-05T11:28:35.972385+00:00 EUVD-2026-262315 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13827 fkie_cve-2025-13827 2026-10-05T11:28:35.972433+00:00

Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-5xw2-57jx-pgjp GHSA-5xw2-57jx-pgjp — GrapesJsBuilder File Upload allows all file uploads 2026-10-05T11:28:35.972478+00:00

Affected: Packagist: mautic/grapes-js-builder-bundle

### Summary

Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted.

### Impact

If the media folder is not restricted from running files this can lead to a remote code execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2721 WID-SEC-W-2025-2721 — Mautic: Mehrere Schwachstellen 2026-10-05T11:28:35.972527+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Mautic ausnutzen, um beliebigen Programmcode auszuführen und seine Rechte zu erweitern.