https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:34:36.237812+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-226221 EUVD-2026-226221 2026-10-06T22:34:36.301821+00:00 EUVD-2026-226221 https://cve.radiocsirt.org/vuln/fkie_cve-2025-31103 fkie_cve-2025-31103 2026-10-06T22:34:36.301859+00:00

Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.

 https://cve.radiocsirt.org/vuln/ghsa-hhgp-h65v-gf93 GHSA-hhgp-h65v-gf93 2026-10-06T22:34:36.301893+00:00

Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000024 jvndb-2025-000024 2026-10-06T22:34:36.301909+00:00

a-blog cms provided by appleple inc. contains untrusted data deserialization vulnerability (CWE-502). The developer states that attacks exploiting the vulnerability has been observed on a-blog cms Ver.2.8.x series or later. appleple inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and appleple inc. coordinated under the Information Security Early Warning Partnership.