https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:54:23.366113+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352571 EUVD-2026-352571 2026-10-05T23:54:23.418277+00:00 EUVD-2026-352571 https://cve.radiocsirt.org/vuln/fkie_cve-2025-71260 fkie_cve-2025-71260 2026-10-05T23:54:23.418327+00:00

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the VIEWSTATE parameter to achieve remote code execution and fully compromise the application. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.

 https://cve.radiocsirt.org/vuln/ghsa-x6vr-xp32-5v9x GHSA-x6vr-xp32-5v9x 2026-10-05T23:54:23.418381+00:00

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the VIEWSTATE parameter to achieve remote code execution and fully compromise the application. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.