https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:36:35.668013+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2007-avi-274 certa-2007-avi-274 — Une vulnérabilité dans la bibliothèque <span class="textit">PHPMailer</span> permet l'exécution de code arbitraire à di… 2026-10-07T14:36:35.672137+00:00 certa-2007-avi-274 https://cve.radiocsirt.org/vuln/euvd-2026-135164 EUVD-2026-135164 2026-10-07T14:36:35.672172+00:00 EUVD-2026-135164 https://cve.radiocsirt.org/vuln/fkie_cve-2007-3215 fkie_cve-2007-3215 2026-10-07T14:36:35.672186+00:00

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

 https://cve.radiocsirt.org/vuln/ghsa-6h78-85v2-mmch GHSA-6h78-85v2-mmch — PHPMailer Shell command injection 2026-10-07T14:36:35.672212+00:00

Affected: Packagist: phpmailer/phpmailer

PHPMailer before 1.7.4, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in `class.phpmailer.php`.

### Impact Shell command injection, remotely exploitable if host application does not filter user data appropriately.

### Patches Fixed in 1.7.4

### Workarounds Filter and validate user-supplied data before putting in the into the `Sender` property.

### References https://nvd.nist.gov/vuln/detail/CVE-2007-3215

### For more information If you have any questions or comments about this advisory: * Open a private issue in [the PHPMailer project](https://github.com/PHPMailer/PHPMailer)

 https://cve.radiocsirt.org/vuln/gsd-2007-3215 gsd-2007-3215 2026-10-07T14:36:35.672241+00:00 gsd-2007-3215