https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:29:40.969705+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-274488 EUVD-2026-274488 2026-10-09T18:29:41.022923+00:00 EUVD-2026-274488 https://cve.radiocsirt.org/vuln/fkie_cve-2022-50912 fkie_cve-2022-50912 2026-10-09T18:29:41.022962+00:00

ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.

 https://cve.radiocsirt.org/vuln/ghsa-9h6r-9xvw-j888 GHSA-9h6r-9xvw-j888 2026-10-09T18:29:41.022996+00:00

ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.