https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:34:12.085348+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-253605 EUVD-2026-253605 2026-10-06T10:34:12.135722+00:00 EUVD-2026-253605 https://cve.radiocsirt.org/vuln/fkie_cve-2025-56769 fkie_cve-2025-56769 2026-10-06T10:34:12.135770+00:00

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

 https://cve.radiocsirt.org/vuln/ghsa-gcfh-36x4-mgj6 GHSA-gcfh-36x4-mgj6 — Hutool allows remote code execution (RCE) via the QLExpressEngine class 2026-10-06T10:34:12.135806+00:00

Affected: Maven: cn.hutool:hutool-extra

An issue was discovered in chinabugotech hutool before 5.8.40 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.