https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:49:30.605187+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-nj61543 CLEANSTART-2026-NJ61543 — Security fix for CVE-2026-47762 applied in: thingsboard-tb-web-ui 4.3.1.1-r1 2026-10-02T15:49:30.610310+00:00

Affected: CleanStart: thingsboard-tb-web-ui

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-322605 EUVD-2026-322605 2026-10-02T15:49:30.610375+00:00 EUVD-2026-322605 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47762 fkie_cve-2026-47762 2026-10-02T15:49:30.610398+00:00

TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and inject scripts that execute when content is restored. Impacts users who utilize the protect option. This vulnerability is fixed in 5.11.1, 7.9.3, and 8.5.1.

 https://cve.radiocsirt.org/vuln/ghsa-v98h-vmpc-fpqv GHSA-v98h-vmpc-fpqv — TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments 2026-10-02T15:49:30.610431+00:00

Affected: npm: tinymce, NuGet: TinyMCE, Packagist: tinymce/tinymce

### Impact Stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and inject scripts that execute when content is restored. Impacts users who utilize the protect option.

### Patches Patched by validating decoded mce:protected content against configured protect regex rules before restoring. Users should upgrade to the latest patched version.

### Workarounds No official workaround available.

### Fix To avoid this vulnerability:

Upgrade to TinyMCE 8.5.1 or higher. Upgrade to TinyMCE 7.9.3 or higher. Upgrade to TinyMCE 5.11.1 LTS or higher for TinyMCE 5.x (only available as part of commercial [long-term support](https://www.tiny.cloud/long-term-support/) contract).

### Acknowledgements Tiny thanks [Ivan Babenko](https://github.com/he1d3n) for their help identifying this vulnerability.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-47762 UBUNTU-CVE-2026-47762 2026-10-02T15:49:30.610480+00:00

Affected: Ubuntu:16.04:LTS: tinymce, Ubuntu:18.04:LTS: tinymce, Ubuntu:20.04:LTS: tinymce

TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and inject scripts that execute when content is restored. Impacts users who utilize the protect option. This vulnerability is fixed in 5.11.1, 7.9.3, and 8.5.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3376 WID-SEC-W-2026-3376 — Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management: Mehrere Schwachst… 2026-10-02T15:49:30.610513+00:00

Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, serverseitige Request-Forgery-Angriffe (SSRF) durchzuführen, Cross-Site-Scripting-Angriffe zu starten, sensible Informationen offenzulegen, Daten zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.