https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:33:26.078506+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-213260 EUVD-2026-213260 2026-10-17T15:33:26.158288+00:00 EUVD-2026-213260 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29443 fkie_cve-2023-29443 2026-10-17T15:33:26.158326+00:00

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint.

 https://cve.radiocsirt.org/vuln/ghsa-h7wh-8cwv-qqm6 GHSA-h7wh-8cwv-qqm6 2026-10-17T15:33:26.158358+00:00

Zoho ManageEngine ServiceDesk Plus through 14104 allows admin users to conduct an XXE attack.

 https://cve.radiocsirt.org/vuln/gsd-2023-29443 gsd-2023-29443 2026-10-17T15:33:26.158374+00:00 gsd-2023-29443 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1058 WID-SEC-W-2023-1058 — Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht XML External Entity Angriff 2026-10-17T15:33:26.158386+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Zoho ManageEngine ServiceDesk Plus ausnutzen, um Informationen offenzulegen oder einen Denial of Service Angriff durchzuführen.