https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T11:43:57.505639+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-231397 EUVD-2026-231397 2026-10-17T11:43:57.570447+00:00 EUVD-2026-231397 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42949 fkie_cve-2022-42949 2026-10-17T11:43:57.570485+00:00

Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions.

 https://cve.radiocsirt.org/vuln/ghsa-cx45-565q-6qx8 GHSA-cx45-565q-6qx8 — SilverStripe Subsite weakens file permissions 2026-10-17T11:43:57.570515+00:00

Affected: Packagist: silverstripe/subsites

The subsites module can weaken edit restrictions on some files and allow a malicious user to edit files they do not have edit rights to.

This only affects projects with the subsites module installed. Regression testing should focus on custom file logic.

Be advised that this is not a case of a user being able to edit a file in subsites they do not have access to. As a reminder, all separation of content achieved with the subsites module should be viewed as cosmetic and not appropriate for security-critical applications.

 https://cve.radiocsirt.org/vuln/gsd-2022-42949 gsd-2022-42949 2026-10-17T11:43:57.570543+00:00 gsd-2022-42949