https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:53:25.263285+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-04603 bdu:2025-04603 2026-10-03T01:53:25.266169+00:00 bdu:2025-04603 https://cve.radiocsirt.org/vuln/euvd-2026-257906 EUVD-2026-257906 2026-10-03T01:53:25.266207+00:00 EUVD-2026-257906 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32103 fkie_cve-2025-32103 2026-10-03T01:53:25.266222+00:00

CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-94cq-g9vr-5q43 GHSA-94cq-g9vr-5q43 2026-10-03T01:53:25.266252+00:00

CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions.