https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T00:31:38.232764+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-23132 cnvd-2025-23132 2026-10-15T00:31:38.235427+00:00 cnvd-2025-23132 https://cve.radiocsirt.org/vuln/euvd-2026-249249 EUVD-2026-249249 2026-10-15T00:31:38.235465+00:00 EUVD-2026-249249 https://cve.radiocsirt.org/vuln/fkie_cve-2025-50286 fkie_cve-2025-50286 2026-10-15T00:31:38.235479+00:00

A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface. Once uploaded, the plugin is automatically extracted and loaded, allowing arbitrary PHP code execution and reverse shell access.

 https://cve.radiocsirt.org/vuln/ghsa-wqvw-453m-rjm2 GHSA-wqvw-453m-rjm2 2026-10-15T00:31:38.235505+00:00

A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface. Once uploaded, the plugin is automatically extracted and loaded, allowing arbitrary PHP code execution and reverse shell access.