https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T03:10:17.359402+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-231399 EUVD-2026-231399 2026-10-06T03:10:17.408256+00:00 EUVD-2026-231399 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55372 fkie_cve-2024-55372 2026-10-06T03:10:17.408292+00:00

Wallos <=2.38.2 has a file upload vulnerability in the restore database function, which allows unauthenticated users to restore database by uploading a ZIP file. The contents of the ZIP file are extracted on the server. This functionality enables an unauthenticated attacker to upload malicious files to the server. Once a web shell is installed, the attacker gains the ability to execute arbitrary commands.

 https://cve.radiocsirt.org/vuln/ghsa-fqxf-49hh-94mj GHSA-fqxf-49hh-94mj 2026-10-06T03:10:17.408326+00:00

Wallos <=2.38.2 has a file upload vulnerability in the restore database function, which allows unauthenticated users to restore database by uploading a ZIP file. The contents of the ZIP file are extracted on the server. This functionality enables an unauthenticated attacker to upload malicious files to the server. Once a web shell is installed, the attacker gains the ability to execute arbitrary commands.