https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:13:02.509094+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-257191 EUVD-2026-257191 2026-10-15T07:13:02.511461+00:00 EUVD-2026-257191 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10348 fkie_cve-2025-10348 2026-10-15T07:13:02.511507+00:00

URVE Smart Office is vulnerable to Stored XSS in report problem functionality. An attacker with a low-privileged account can upload an SVG file containing a malicious payload, which will be executed when a victim visits the URL of the uploaded resource. The resource is available to anyone without any form of authentication.

This issue was fixed in version 1.1.24.

 https://cve.radiocsirt.org/vuln/ghsa-3f7x-5hc9-j6v5 GHSA-3f7x-5hc9-j6v5 2026-10-15T07:13:02.511562+00:00

URVE Smart Office is vulnerable to Stored XSS in report problem functionality. An attacker with a low-privileged account can upload an SVG file containing a malicious payload, which will be executed when a victim visits the URL of the uploaded resource. The resource is available to anyone without any form of authentication.

This issue was fixed in version 1.1.24.