https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T10:29:45.273611+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-29256 EUVD-2026-29256 2026-10-19T10:29:45.276641+00:00 EUVD-2026-29256 https://cve.radiocsirt.org/vuln/fkie_cve-2021-35489 fkie_cve-2021-35489 2026-10-19T10:29:45.276671+00:00

Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it.

 https://cve.radiocsirt.org/vuln/ghsa-6642-wv2w-7c29 GHSA-6642-wv2w-7c29 2026-10-19T10:29:45.276702+00:00

Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it.

 https://cve.radiocsirt.org/vuln/gsd-2021-35489 gsd-2021-35489 2026-10-19T10:29:45.276720+00:00 gsd-2021-35489