https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:01:52.155249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244478 EUVD-2026-244478 2026-10-05T05:01:52.188186+00:00 EUVD-2026-244478 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48992 fkie_cve-2025-48992 2026-10-05T05:01:52.188225+00:00

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.123 and 25.0.27, a stored and blind cross-site scripting (XSS) vulnerability exists in the Name Field of the user profile. A malicious attacker can change their name to a javascript payload, which is executed when a user adds the malicious user to their Synchronization > Address books. This issue has been patched in versions 6.8.123 and 25.0.27.