https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T07:03:41.230225+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349082 EUVD-2026-349082 2026-10-09T07:03:41.232805+00:00 EUVD-2026-349082 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19045 fkie_cve-2026-19045 2026-10-09T07:03:41.232845+00:00

A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts of the component get_credential_from_user. This manipulation of the argument Description causes command injection. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/ghsa-5ccg-4qw3-g338 GHSA-5ccg-4qw3-g338 2026-10-09T07:03:41.232887+00:00

A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts of the component get_credential_from_user. This manipulation of the argument Description causes command injection. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.