https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:11:34.391689+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291377 EUVD-2026-291377 2026-10-08T00:11:34.455914+00:00 EUVD-2026-291377 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8259 fkie_cve-2025-8259 2026-10-08T00:11:34.455970+00:00

A vulnerability was identified in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. Affected by this issue is the function execute_DataObjectProc of the file /grid/vgrid_server.php of the component Web interface. Such manipulation of the argument xajaxargs leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version 5.1.1 and 5.4.1 can resolve this issue. It is suggested to upgrade the affected component.

 https://cve.radiocsirt.org/vuln/ghsa-8wmv-6886-5g9j GHSA-8wmv-6886-5g9j 2026-10-08T00:11:34.456005+00:00

A vulnerability, which was classified as critical, was found in Vaelsys 4.1.0. This affects the function execute_DataObjectProc of the file /grid/vgrid_server.php. The manipulation of the argument xajaxargs leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.