https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:18:25.613377+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05226 bdu:2026-05226 2026-10-04T01:18:25.695180+00:00 bdu:2026-05226 https://cve.radiocsirt.org/vuln/euvd-2026-226561 EUVD-2026-226561 2026-10-04T01:18:25.695227+00:00 EUVD-2026-226561 https://cve.radiocsirt.org/vuln/fkie_cve-2025-30090 fkie_cve-2025-30090 2026-10-04T01:18:25.695242+00:00

mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true.

 https://cve.radiocsirt.org/vuln/ghsa-rj9p-v8v3-qjg9 GHSA-rj9p-v8v3-qjg9 2026-10-04T01:18:25.695271+00:00

mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-30090 UBUNTU-CVE-2025-30090 2026-10-04T01:18:25.695286+00:00

Affected: Ubuntu:Pro:14.04:LTS: squirrelmail, Ubuntu:16.04:LTS: squirrelmail

mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true.