https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:35:41.199169+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291807 EUVD-2026-291807 2026-10-17T15:35:41.291069+00:00 EUVD-2026-291807 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21719 fkie_cve-2026-21719 2026-10-17T15:35:41.291111+00:00

An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command.

 https://cve.radiocsirt.org/vuln/ghsa-mj52-hprj-j8xh GHSA-mj52-hprj-j8xh 2026-10-17T15:35:41.291146+00:00

An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000057 jvndb-2026-000057 2026-10-17T15:35:41.291163+00:00

CubeCart provided by CubeCart Limited contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/89.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/22.html' target='_blank'></a><ul><li>OS command injection (CWE-78) - CVE-2026-21719</li><li>SQL injection (CWE-89) - CVE-2026-34018</li><li>Path traversal (CWE-22) - CVE-2026-35496</li></ul>Gen Sato of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to the developer first, and to IPA later. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.