https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T11:38:36.648977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00348 bdu:2026-00348 2026-10-19T11:38:36.652093+00:00 bdu:2026-00348 https://cve.radiocsirt.org/vuln/euvd-2026-246551 EUVD-2026-246551 2026-10-19T11:38:36.652124+00:00 EUVD-2026-246551 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48501 fkie_cve-2025-48501 2026-10-19T11:38:36.652138+00:00

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running.

 https://cve.radiocsirt.org/vuln/ghsa-ppp8-5876-x5fr GHSA-ppp8-5876-x5fr 2026-10-19T11:38:36.652164+00:00

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000047 jvndb-2025-000047 2026-10-19T11:38:36.652179+00:00

Nimesa Backup and Recovery provided by Nimesa contains multiple vulnerabilities listed below.<ul><li>OS command injection (CWE-78) - CVE-2025-48501</li><li>Server-side request forgery (CWE-918) - CVE-2025-53473</li></ul> Kentaro Kawane of GMO Cybersecurity by Ierae reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.