https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:15:12.734806+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-14282 cnvd-2026-14282 2026-10-06T11:15:12.792140+00:00 cnvd-2026-14282 https://cve.radiocsirt.org/vuln/euvd-2026-274349 EUVD-2026-274349 2026-10-06T11:15:12.792179+00:00 EUVD-2026-274349 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25394 fkie_cve-2019-25394 2026-10-06T11:15:12.792194+00:00

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the modem.cgi script that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted payloads in parameters like INIT, HANGUP, SPEAKER_ON, SPEAKER_OFF, TONE_DIAL, and PULSE_DIAL to execute arbitrary JavaScript in users' browsers when the stored data is retrieved.

 https://cve.radiocsirt.org/vuln/ghsa-qcc6-w9r3-h3c3 GHSA-qcc6-w9r3-h3c3 2026-10-06T11:15:12.792226+00:00

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the modem.cgi script that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted payloads in parameters like INIT, HANGUP, SPEAKER_ON, SPEAKER_OFF, TONE_DIAL, and PULSE_DIAL to execute arbitrary JavaScript in users' browsers when the stored data is retrieved.