https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:31:01.460450+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-51520 EUVD-2026-51520 2026-10-08T19:31:01.463238+00:00 EUVD-2026-51520 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7725 fkie_cve-2019-7725 2026-10-08T19:31:01.463269+00:00

includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk).

 https://cve.radiocsirt.org/vuln/ghsa-32wr-8wxm-852c GHSA-32wr-8wxm-852c — Deserialization of Untrusted Data in NukeViet 2026-10-08T19:31:01.463300+00:00

Affected: Packagist: nukeviet/nukeviet

includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk).

 https://cve.radiocsirt.org/vuln/gsd-2019-7725 gsd-2019-7725 2026-10-08T19:31:01.463323+00:00 gsd-2019-7725