https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:19:20.426257+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281248 EUVD-2026-281248 2026-10-10T19:19:20.429058+00:00 EUVD-2026-281248 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24913 fkie_cve-2026-24913 2026-10-10T19:19:20.429090+00:00

SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.

 https://cve.radiocsirt.org/vuln/ghsa-xw7j-84mx-6v67 GHSA-xw7j-84mx-6v67 2026-10-10T19:19:20.429120+00:00

SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000052 jvndb-2026-000052 2026-10-10T19:19:20.429136+00:00

MATCHA series provided by ICZ Corporation contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/89.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/434.html' target='_blank'></a><ul><li>SQL injection (CWE-89) - CVE-2026-24913</li><li>Cross-site scripting (CWE-79) - CVE-2026-27787</li><li>Unrestricted upload of file with dangerous type(CWE-434) - CVE-2026-33273</li></ul>CVE-2026-24913, CVE-2026-27787 Kenta Chikagawa of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-33273 Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.