https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:16:40.650220+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-256976 EUVD-2026-256976 2026-10-07T15:16:40.733349+00:00 EUVD-2026-256976 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27224 fkie_cve-2025-27224 2026-10-07T15:16:40.733415+00:00

TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files. However, the application doesn't properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to write to any filename with any file type at any location on the local server, ultimately allowing execution of arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-g458-fw23-89vc GHSA-g458-fw23-89vc 2026-10-07T15:16:40.733479+00:00

TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files. However, the application doesn't properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to write to any filename with any file type at any location on the local server, ultimately allowing execution of arbitrary code.