https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:31:17.835460+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-22349 cnvd-2020-22349 2026-10-08T20:31:17.838823+00:00 cnvd-2020-22349 https://cve.radiocsirt.org/vuln/euvd-2026-57235 EUVD-2026-57235 2026-10-08T20:31:17.838857+00:00 EUVD-2026-57235 https://cve.radiocsirt.org/vuln/fkie_cve-2019-15642 fkie_cve-2019-15642 2026-10-08T20:31:17.838872+00:00

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must not be granted to un-trusted Webmin users."

 https://cve.radiocsirt.org/vuln/ghsa-wf78-9xpm-m77r GHSA-wf78-9xpm-m77r 2026-10-08T20:31:17.838902+00:00

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must not be granted to un-trusted Webmin users."

 https://cve.radiocsirt.org/vuln/gsd-2019-15642 gsd-2019-15642 2026-10-08T20:31:17.838919+00:00 gsd-2019-15642