https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:29:04.731032+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-240709 EUVD-2026-240709 2026-10-07T18:29:04.863759+00:00 EUVD-2026-240709 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40199 fkie_cve-2022-40199 2026-10-07T18:29:04.863799+00:00

Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product's directory structure information.

 https://cve.radiocsirt.org/vuln/ghsa-wjpv-frf2-3r58 GHSA-wjpv-frf2-3r58 — EC-CUBE Directory traversal vulnerability 2026-10-07T18:29:04.863835+00:00

Affected: Packagist: ec-cube/ec-cube

Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product's directory structure information.

 https://cve.radiocsirt.org/vuln/gsd-2022-40199 gsd-2022-40199 2026-10-07T18:29:04.863863+00:00 gsd-2022-40199 https://cve.radiocsirt.org/vuln/jvndb-2022-000073 jvndb-2022-000073 2026-10-07T18:29:04.863876+00:00

EC-CUBE provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Directory traversal vulnerability (CWE-22) - CVE-2022-40199 * DOM-based cross-site scripting vulnerability (CWE-79) - CVE-2022-38975 Noriaki Iwasaki of Cyber Defense Institute, Inc. reported these vulnerabilities to EC-CUBE CO.,LTD. and EC-CUBE CO.,LTD. reported them to JPCERT/CC to notify users of the solutions through JVN.