https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:24:51.440167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262316 EUVD-2026-262316 2026-10-05T13:24:51.489475+00:00 EUVD-2026-262316 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13828 fkie_cve-2025-13828 2026-10-05T13:24:51.489513+00:00

SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.

ImpactA low-privileged user of the platform can install malicious code to obtain higher privileges.

 https://cve.radiocsirt.org/vuln/ghsa-3fq7-c5m8-g86x GHSA-3fq7-c5m8-g86x — Mautic user without privileged access to the Marketplace can install and uninstall composer packages 2026-10-05T13:24:51.489547+00:00

Affected: Packagist: mautic/core

### Summary

A non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.

### Impact

A low-privileged user of the platform can install malicious code to obtain higher privileges.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2721 WID-SEC-W-2025-2721 — Mautic: Mehrere Schwachstellen 2026-10-05T13:24:51.489575+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Mautic ausnutzen, um beliebigen Programmcode auszuführen und seine Rechte zu erweitern.