https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T09:54:00.608273+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244633 EUVD-2026-244633 2026-10-08T09:54:00.656503+00:00 EUVD-2026-244633 https://cve.radiocsirt.org/vuln/fkie_cve-2024-57186 fkie_cve-2024-57186 2026-10-08T09:54:00.656545+00:00

In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-file endpoint handler.

 https://cve.radiocsirt.org/vuln/ghsa-rq9r-qvwg-829q GHSA-rq9r-qvwg-829q — Erxes Path Traversal vulnerability 2026-10-08T09:54:00.656579+00:00

Affected: npm: erxes

In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-file endpoint handler.