https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T14:23:06.698614+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-33932 EUVD-2026-33932 2026-10-22T14:23:06.702215+00:00 EUVD-2026-33932 https://cve.radiocsirt.org/vuln/fkie_cve-2021-46386 fkie_cve-2021-46386 2026-10-22T14:23:06.702263+00:00

File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.

 https://cve.radiocsirt.org/vuln/ghsa-cwx9-rp4w-4545 GHSA-cwx9-rp4w-4545 — Mingsoft MCMS vulnerable to Remote Code Execution via file upload. 2026-10-22T14:23:06.702314+00:00

Affected: Maven: net.mingsoft:ms-mcms

Mingsoft MCMS is a Java CMS. Versions prior to and including 5.2.5 contain a file upload vulnerability allowing for a jspx webshell to be uploaded via net.mingsoft.basic.action.web.FileAction#upload, resulting in remote code execution. It is unclear if this issue has been patched.

 https://cve.radiocsirt.org/vuln/gsd-2021-46386 gsd-2021-46386 2026-10-22T14:23:06.702364+00:00 gsd-2021-46386