https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:47:12.925935+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-37459 cnvd-2024-37459 2026-10-06T23:47:12.976764+00:00 cnvd-2024-37459 https://cve.radiocsirt.org/vuln/euvd-2026-158128 EUVD-2026-158128 2026-10-06T23:47:12.976802+00:00 EUVD-2026-158128 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42167 fkie_cve-2024-42167 2026-10-06T23:47:12.976817+00:00

The function "generate_app_certificates" in controllers/saml2/saml2.js of FIWARE Keyrock <= 8.4 does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create applications to execute commands by creating an application with a malicious organisationname.

 https://cve.radiocsirt.org/vuln/ghsa-fvfg-7v3r-g9v3 GHSA-fvfg-7v3r-g9v3 2026-10-06T23:47:12.976848+00:00

The function "generate_app_certificates" in controllers/saml2/saml2.js of FIWARE Keyrock <= 8.4 does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create applications to execute commands by creating an application with a malicious organisationname.