https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:56:40.112573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280963 EUVD-2026-280963 2026-10-06T17:56:40.169175+00:00 EUVD-2026-280963 https://cve.radiocsirt.org/vuln/fkie_cve-2024-58283 fkie_cve-2024-58283 2026-10-06T17:56:40.169222+00:00

WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager. Attackers can exploit the file upload functionality in the elfinder connector to upload a web shell and execute arbitrary system commands through a user-controlled parameter.

 https://cve.radiocsirt.org/vuln/ghsa-q35v-85f7-hfph GHSA-q35v-85f7-hfph 2026-10-06T17:56:40.169269+00:00

WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager. Attackers can exploit the file upload functionality in the elfinder connector to upload a web shell and execute arbitrary system commands through a user-controlled parameter.