https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T21:00:14.703373+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-263907 EUVD-2026-263907 2026-10-16T21:00:14.705986+00:00 EUVD-2026-263907 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47221 fkie_cve-2025-47221 2026-10-16T21:00:14.706031+00:00

An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The properties ARCHIVETODISK_FILENAME-PATTERN, ARCHIVETODISK_PATH_BASE, ARCHIVETODISK_PATH_PATTERN can be set to any path, even ones that will point to files that already exist. This vulnerability gives a user with admin access the possibility to write files in arbitrary directories in the server file system and potentially overwrite files accessible by the local user JBoss.

 https://cve.radiocsirt.org/vuln/ghsa-29m9-646j-c7p3 GHSA-29m9-646j-c7p3 2026-10-16T21:00:14.706070+00:00

Keyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 2 of 3.