https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T00:38:49.132347+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280667 EUVD-2026-280667 2026-10-05T00:38:49.180111+00:00 EUVD-2026-280667 https://cve.radiocsirt.org/vuln/fkie_cve-2013-10049 fkie_cve-2013-10049 2026-10-05T00:38:49.180151+00:00

An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHandler.cgi endpoint exposed through the web interface. The CGI script fails to properly sanitize user-supplied input in the timeZone parameter of a POST request, allowing remote attackers to inject arbitrary shell commands.

 https://cve.radiocsirt.org/vuln/ghsa-7v67-qhqf-7xjm GHSA-7v67-qhqf-7xjm 2026-10-05T00:38:49.180187+00:00

An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHandler.cgi endpoint exposed through the web interface. The CGI script fails to properly sanitize user-supplied input in the timeZone parameter of a POST request, allowing remote attackers to inject arbitrary shell commands.