https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:16:42.551006+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-29364 EUVD-2026-29364 2026-10-09T12:16:42.553744+00:00 EUVD-2026-29364 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36359 fkie_cve-2021-36359 2026-10-09T12:16:42.553778+00:00

OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution (RCE) via XML tag injection because reportlab\platypus\paraparser.py (reached via bscw.cgi op=_editfolder.EditFolder) calls eval on attacker-supplied Python code. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3.

 https://cve.radiocsirt.org/vuln/ghsa-764h-r5xf-7cf5 GHSA-764h-r5xf-7cf5 2026-10-09T12:16:42.553810+00:00

OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution (RCE) via XML tag injection because reportlab\platypus\paraparser.py (reached via bscw.cgi op=_editfolder.EditFolder) calls eval on attacker-supplied Python code. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3.

 https://cve.radiocsirt.org/vuln/gsd-2021-36359 gsd-2021-36359 2026-10-09T12:16:42.553827+00:00 gsd-2021-36359