https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:42:03.973249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-05137 cnvd-2026-05137 2026-10-03T08:42:03.975871+00:00 cnvd-2026-05137 https://cve.radiocsirt.org/vuln/euvd-2026-292163 EUVD-2026-292163 2026-10-03T08:42:03.975902+00:00 EUVD-2026-292163 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2749 fkie_cve-2025-2749 2026-10-03T08:42:03.975916+00:00

An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.

 https://cve.radiocsirt.org/vuln/ghsa-g53h-cfhr-24hw GHSA-g53h-cfhr-24hw 2026-10-03T08:42:03.975945+00:00

An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.