https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T05:32:49.478735+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-25869 EUVD-2026-25869 2026-10-10T05:32:49.482446+00:00 EUVD-2026-25869 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28154 fkie_cve-2021-28154 2026-10-10T05:32:49.482493+00:00

Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it does not allow any remote scripts to be opened, no unsafe scripts to be evaluated, no remote sites to be browsed.

 https://cve.radiocsirt.org/vuln/ghsa-ggf5-r98h-6h5g GHSA-ggf5-r98h-6h5g 2026-10-10T05:32:49.482540+00:00

** DISPUTED ** Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it does not allow any remote scripts to be opened, no unsafe scripts to be evaluated, no remote sites to be browsed."

 https://cve.radiocsirt.org/vuln/gsd-2021-28154 gsd-2021-28154 2026-10-10T05:32:49.482568+00:00 gsd-2021-28154