https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:52:30.718686+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-246014 EUVD-2026-246014 2026-10-10T21:52:30.722022+00:00 EUVD-2026-246014 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6736 fkie_cve-2025-6736 2026-10-10T21:52:30.722054+00:00

A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-mrph-pjv2-34f4 GHSA-mrph-pjv2-34f4 — JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing certain components 2026-10-10T21:52:30.722086+00:00

Affected: Packagist: juzaweb/cms

A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.