https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T01:55:48.072668+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-0058 EUVD-2026-0058 2026-10-08T01:55:48.129446+00:00 EUVD-2026-0058 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7327 fkie_cve-2024-7327 2026-10-08T01:55:48.129494+00:00

A vulnerability classified as critical was found in Xinhu RockOA 2.6.2. This vulnerability affects the function dataAction of the file /webmain/task/openapi/openmodhetongAction.php. The manipulation of the argument nickName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273250 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-g8rf-63h9-mw87 GHSA-g8rf-63h9-mw87 2026-10-08T01:55:48.129545+00:00

A vulnerability classified as critical was found in Xinhu RockOA 2.6.2. This vulnerability affects the function dataAction of the file /webmain/task/openapi/openmodhetongAction.php. The manipulation of the argument nickName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273250 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.