https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T20:40:44.250312+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-218799 EUVD-2026-218799 2026-10-18T20:40:44.252016+00:00 EUVD-2026-218799 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27140 fkie_cve-2025-27140 2026-10-18T20:40:44.252048+00:00

WeGIA is a Web manager for charitable institutions. An OS Command Injection vulnerability was discovered in versions prior to 3.2.15 of the WeGIA application, `importar_dump.php` endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. The command is basically a command to move a temporary file, so a webshell upload is also possible. Version 3.2.15 contains a patch for the issue.