https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:50:22.899738+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-342834 EUVD-2026-342834 2026-10-06T22:50:22.966061+00:00 EUVD-2026-342834 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63358 fkie_cve-2026-63358 2026-10-06T22:50:22.966108+00:00

FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.

 https://cve.radiocsirt.org/vuln/ghsa-9m9p-7p6h-xv99 GHSA-9m9p-7p6h-xv99 2026-10-06T22:50:22.966149+00:00

FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.

 https://cve.radiocsirt.org/vuln/va-26-202-03 VA-26-202-03 — FileGator privilege escalation 2026-10-06T22:50:22.966168+00:00

FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.