https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:03:00.306738+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-267377 EUVD-2026-267377 2026-10-03T10:03:00.363186+00:00 EUVD-2026-267377 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25237 fkie_cve-2026-25237 2026-10-03T10:03:00.363240+00:00

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the evaluated replacement. This issue has been patched in version 1.33.0.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0050 NCSC-2026-0050 — Kwetsbaarheid verholpen in PEAR 2026-10-03T10:03:00.363275+00:00 NCSC-2026-0050 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25237 UBUNTU-CVE-2026-25237 2026-10-03T10:03:00.363295+00:00

Affected: Ubuntu:Pro:16.04:LTS: php-pear, Ubuntu:18.04:LTS: php-pear, Ubuntu:20.04:LTS: php-pear, Ubuntu:22.04:LTS: php-pear, Ubuntu:24.04:LTS: php-pear, Ubuntu:25.10: php-pear

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the evaluated replacement. This issue has been patched in version 1.33.0.