https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:04:10.596284+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-356705 EUVD-2026-356705 2026-10-02T10:04:10.640577+00:00 EUVD-2026-356705 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14601 fkie_cve-2025-14601 2026-10-02T10:04:10.640612+00:00

An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operations, expose sensitive data, or potentially achieve full server compromise.

Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and on have the patch.

 https://cve.radiocsirt.org/vuln/ghsa-mjxg-34vj-37wc GHSA-mjxg-34vj-37wc 2026-10-02T10:04:10.640649+00:00

An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operations, expose sensitive data, or potentially achieve full server compromise.

Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and on have the patch.