https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:11:41.256290+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00163 bdu:2026-00163 2026-10-05T23:11:41.343933+00:00 bdu:2026-00163 https://cve.radiocsirt.org/vuln/cnvd-2025-09675 cnvd-2025-09675 2026-10-05T23:11:41.343971+00:00 cnvd-2025-09675 https://cve.radiocsirt.org/vuln/euvd-2026-235344 EUVD-2026-235344 2026-10-05T23:11:41.343987+00:00 EUVD-2026-235344 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43919 fkie_cve-2025-43919 2026-10-05T23:11:41.343999+00:00

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the private archive authentication endpoint) via the username parameter. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.

 https://cve.radiocsirt.org/vuln/ghsa-56r4-vj3r-h3vv GHSA-56r4-vj3r-h3vv 2026-10-05T23:11:41.344028+00:00

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the private archive authentication endpoint) via the username parameter.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-43919 Withdrawn: UBUNTU-CVE-2025-43919 2026-10-05T23:11:41.344043+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman, Ubuntu:Pro:20.04:LTS: mailman

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the private archive authentication endpoint) via the username parameter. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0858 WID-SEC-W-2025-0858 — cPanel/WHM: Mehrere Schwachstellen 2026-10-05T23:11:41.344069+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cPanel/WHM ausnutzen, um Informationen offenzulegen, um beliebige Kommandos auszuführen und um Sicherheitsmechanismen zu umgehen.