https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T22:36:53.152795+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225053 EUVD-2026-225053 2026-10-21T22:36:53.156395+00:00 EUVD-2026-225053 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24230 fkie_cve-2024-24230 2026-10-21T22:36:53.156428+00:00

Komm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime().exec followed by an OS command.

 https://cve.radiocsirt.org/vuln/ghsa-h8vf-mrp9-h5cj GHSA-h8vf-mrp9-h5cj 2026-10-21T22:36:53.156458+00:00

Komm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime().exec followed by an OS command.

 https://cve.radiocsirt.org/vuln/gsd-2024-24230 gsd-2024-24230 2026-10-21T22:36:53.156475+00:00 gsd-2024-24230