https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T10:56:53.973125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-21135 cnvd-2025-21135 2026-10-16T10:56:53.980246+00:00 cnvd-2025-21135 https://cve.radiocsirt.org/vuln/euvd-2026-251958 EUVD-2026-251958 2026-10-16T10:56:53.980292+00:00 EUVD-2026-251958 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41035 fkie_cve-2025-41035 2026-10-16T10:56:53.980315+00:00

A problem has been discovered in appRain CMF 4.0.5. An authenticated Path Traversal vulnerability in /apprain/common/download/ allows remote users to bypass the intended SecurityManager restrictions and download any file if they have adequate permissions outside the document root configured on the server via the base64 path after /download/.

 https://cve.radiocsirt.org/vuln/ghsa-w4h7-75xh-3v83 GHSA-w4h7-75xh-3v83 2026-10-16T10:56:53.980361+00:00

A problem has been discovered in appRain CMF 4.0.5. An authenticated Path Traversal vulnerability in /apprain/common/download/ allows remote users to bypass the intended SecurityManager restrictions and download any file if they have adequate permissions outside the document root configured on the server via the base64 path after /download/.