https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T22:27:05.090603+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-44473 EUVD-2026-44473 2026-10-14T22:27:05.093977+00:00 EUVD-2026-44473 https://cve.radiocsirt.org/vuln/fkie_cve-2020-22000 fkie_cve-2020-22000 2026-10-14T22:27:05.094028+00:00

HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploited with a CSRF vulnerability to execute arbitrary shell commands as the web user via the 'set_command_on' and 'set_command_off' POST parameters in '/system/systemplugins/customcommand/customcommand.plugin.php' by using an unsanitized PHP exec() function.

 https://cve.radiocsirt.org/vuln/ghsa-8xmw-45cw-q6ch GHSA-8xmw-45cw-q6ch 2026-10-14T22:27:05.094094+00:00

HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploited with a CSRF vulnerability to execute arbitrary shell commands as the web user via the 'set_command_on' and 'set_command_off' POST parameters in '/system/systemplugins/customcommand/customcommand.plugin.php' by using an unsanitized PHP exec() function.

 https://cve.radiocsirt.org/vuln/gsd-2020-22000 gsd-2020-22000 2026-10-14T22:27:05.094113+00:00 gsd-2020-22000