https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T09:05:52.017293+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-265845 EUVD-2026-265845 2026-10-19T09:05:52.020035+00:00 EUVD-2026-265845 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62193 fkie_cve-2025-62193 2026-10-19T09:05:52.020067+00:00

Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixed in a version of 'gov.noaa.pmel.tmap.las.filter.RequestInputFilter.java' from 2025-09-24.

 https://cve.radiocsirt.org/vuln/ghsa-4rx6-3q6g-vr7j GHSA-4rx6-3q6g-vr7j 2026-10-19T09:05:52.020098+00:00

Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, unauthenticated attackers can execute arbitrary OS commands.

 https://cve.radiocsirt.org/vuln/va-26-015-01 VA-26-015-01 — NOAA PMEL Live Access Server (LAS) command injection 2026-10-19T09:05:52.020115+00:00

Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixed in a version of 'gov.noaa.pmel.tmap.las.filter.RequestInputFilter.java' from 2025-09-24.