https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T01:57:16.926860+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-246013 EUVD-2026-246013 2026-10-12T01:57:16.966241+00:00 EUVD-2026-246013 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6735 fkie_cve-2025-6735 2026-10-12T01:57:16.966283+00:00

A vulnerability classified as critical has been found in juzaweb CMS 3.4.2. Affected is an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-rq7x-cfmc-rq3w GHSA-rq7x-cfmc-rq3w — JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing Import Page component 2026-10-12T01:57:16.966331+00:00

Affected: Packagist: juzaweb/cms

A vulnerability classified as critical has been found in JuzaWeb CMS 3.4.2. Affected is an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.