https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:11:15.719236+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352631 EUVD-2026-352631 2026-10-03T11:11:15.773020+00:00 EUVD-2026-352631 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54368 fkie_cve-2026-54368 2026-10-03T11:11:15.773087+00:00

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized interpolation of the Field parameter directly into SQL query strings to write arbitrary files to the server filesystem via PostgreSQL lo_from_bytea() and lo_export() functions, enabling remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-4cmj-5m56-fg8c GHSA-4cmj-5m56-fg8c 2026-10-03T11:11:15.773138+00:00

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized interpolation of the Field parameter directly into SQL query strings to write arbitrary files to the server filesystem via PostgreSQL lo_from_bytea() and lo_export() functions, enabling remote code execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2607 WID-SEC-W-2026-2607 — Gladinet CentreStack: Mehrere Schwachstellen 2026-10-03T11:11:15.773157+00:00

Ein Angreifer kann mehrere Schwachstellen in Gladinet CentreStack ausnutzen, um beliebigen Programmcode auszuführen,SQL-Injection durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.