https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T03:50:46.538975+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-11796 cnvd-2026-11796 2026-10-20T03:50:46.541558+00:00 cnvd-2026-11796 https://cve.radiocsirt.org/vuln/euvd-2026-266618 EUVD-2026-266618 2026-10-20T03:50:46.541590+00:00 EUVD-2026-266618 https://cve.radiocsirt.org/vuln/fkie_cve-2016-15057 fkie_cve-2016-15057 2026-10-20T03:50:46.541604+00:00

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Continuum.

This issue affects Apache Continuum: all versions.

Attackers with access to the installations REST API can use this to invoke arbitrary commands on the server.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/ghsa-77p9-w6pj-rmvg GHSA-77p9-w6pj-rmvg — Apache Continuum vulnerable to Command Injection through Installations REST API 2026-10-20T03:50:46.541639+00:00

Affected: Maven: org.apache.continuum:continuum

***UNSUPPORTED WHEN ASSIGNED***

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Continuum.

This issue affects Apache Continuum: all versions.

Attackers with access to the Installations REST API can use this to invoke arbitrary commands on the server.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.