https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:46:11.658612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-1127 certfr-2025-avi-1127 — De multiples vulnérabilités ont été découvertes dans Centreon Web. Elles permettent à un attaquant de provoquer un prob… 2026-10-04T20:46:11.752552+00:00 certfr-2025-avi-1127 https://cve.radiocsirt.org/vuln/euvd-2026-235150 EUVD-2026-235150 2026-10-04T20:46:11.752592+00:00 EUVD-2026-235150 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43865 fkie_cve-2025-43865 2026-10-04T20:46:11.752607+00:00

React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values ​​of the data object passed to the HTML. This issue has been patched in version 7.5.2.

 https://cve.radiocsirt.org/vuln/ghsa-cpj6-fhp6-mr6j GHSA-cpj6-fhp6-mr6j — React Router allows pre-render data spoofing on React-Router framework mode 2026-10-04T20:46:11.752638+00:00

Affected: npm: react-router

## Summary After some research, it turns out that it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values ​​of the data object passed to the HTML. Latest versions are impacted.

## Details The vulnerable header is `X-React-Router-Prerender-Data`, a specific JSON object must be passed to it in order for the spoofing to be successful as we will see shortly. Here is [the vulnerable code](https://github.com/remix-run/react-router/blob/e6c53a0130559b4a9bd47f9cf76ea5b08a69868a/packages/react-router/lib/server-runtime/routes.ts#L87) :

<img width="776" alt="Capture d’écran 2025-04-07 à 05 36 58" src="https://github.com/user-attachments/assets/c95b0b33-15ce-4d30-9f5e-b10525dd6ab4" />

To use the header, React-router must be used in Framework mode, and for the attack to be possible the target page must use a loader.

## Steps to reproduce Versions used for our PoC: - "@react-router/node": "^7.5.0", - "@react-router/serve": "^7.5.0", - "react": "^19.0.0" - "react-dom": "^19.0.0" - "react-router": "^7.5.0"

1. Install React-Router with its default configuration in Framework mode (https://reactrouter.com/start/framework/installation) 2. Add a simple page using a loader (example: `routes/ssr`) 3. Access your page (*which uses the loader*) by suffixing it with `.data`. In our case the page is called `/ssr`:

![image](https://github.com/user-attachments/assets/d7d04e86-c549-4f4a-9200-2d1b6ac96aa…

 https://cve.radiocsirt.org/vuln/rhsa-2025:13904 RHSA-2025:13904 — Red Hat Security Advisory: RHOAI 2.23.0 - Red Hat OpenShift AI 2026-10-04T20:46:11.752735+00:00

react-router: React Router allows pre-render data spoofing on React-Router framework mode

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1435 WID-SEC-W-2025-1435 — IBM Storage Scale: Mehrere Schwachstellen 2026-10-04T20:46:11.752757+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Storage Scale ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.