https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T22:02:06.245457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-134342 EUVD-2026-134342 2026-10-22T22:02:06.249521+00:00 EUVD-2026-134342 https://cve.radiocsirt.org/vuln/fkie_cve-2007-2348 fkie_cve-2007-2348 2026-10-22T22:02:06.249566+00:00

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands such as "get" which could overwrite executable files.

 https://cve.radiocsirt.org/vuln/ghsa-m4hr-2hrx-m38c GHSA-m4hr-2hrx-m38c 2026-10-22T22:02:06.249612+00:00

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands such as "get" which could overwrite executable files.

 https://cve.radiocsirt.org/vuln/gsd-2007-2348 gsd-2007-2348 2026-10-22T22:02:06.249643+00:00 gsd-2007-2348 https://cve.radiocsirt.org/vuln/rhsa-2009:1278 RHSA-2009:1278 — Red Hat Security Advisory: lftp security and bug fix update 2026-10-22T22:02:06.249664+00:00

lftp mirror --script does not escape names and targets of symbolic links