https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:32:20.660784+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-263250 EUVD-2026-263250 2026-10-08T03:32:20.664432+00:00 EUVD-2026-263250 https://cve.radiocsirt.org/vuln/fkie_cve-2025-63739 fkie_cve-2025-63739 2026-10-08T03:32:20.664466+00:00

An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated users to modify PHP configuration files via the a parameter to the index.php endpoint.

 https://cve.radiocsirt.org/vuln/ghsa-jjcj-frhf-qphh GHSA-jjcj-frhf-qphh 2026-10-08T03:32:20.664497+00:00

An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated users to modify PHP configuration files via the a parameter to the index.php endpoint.