https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T01:15:45.029402+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277426 EUVD-2026-277426 2026-10-16T01:15:45.032146+00:00 EUVD-2026-277426 https://cve.radiocsirt.org/vuln/fkie_cve-2025-60946 fkie_cve-2025-60946 2026-10-16T01:15:45.032176+00:00

Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.

 https://cve.radiocsirt.org/vuln/ghsa-q4rc-c232-4f3v GHSA-q4rc-c232-4f3v 2026-10-16T01:15:45.032217+00:00

Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.

 https://cve.radiocsirt.org/vuln/va-26-082-01 VA-26-082-01 — Census CSWeb multiple vulnerabilities 2026-10-16T01:15:45.032257+00:00

Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha. Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha. Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victim's browser. Fixed in 8.1.0 alpha. Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.