https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:13:25.164521+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260977 EUVD-2026-260977 2026-10-07T12:13:25.166640+00:00 EUVD-2026-260977 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13209 fkie_cve-2025-13209 2026-10-07T12:13:25.166690+00:00

A weakness has been identified in bestfeng oa_git_free up to 9.5. This affects the function updateWriteBack of the file yimioa-oa9.5\server\c-flow\src\main\java\com\cloudweb\oa\controller\WorkflowPredefineController.java. This manipulation of the argument writeProp causes xml external entity reference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

 https://cve.radiocsirt.org/vuln/ghsa-2rmp-qgp4-wg66 GHSA-2rmp-qgp4-wg66 2026-10-07T12:13:25.166727+00:00

A weakness has been identified in bestfeng oa_git_free up to 9.5. This affects the function updateWriteBack of the file yimioa-oa9.5\server\c-flow\src\main\java\com\cloudweb\oa\controller\WorkflowPredefineController.java. This manipulation of the argument writeProp causes xml external entity reference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.