https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:50:26.901224+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-267790 EUVD-2026-267790 2026-10-07T13:50:26.940676+00:00 EUVD-2026-267790 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25057 fkie_cve-2026-25057 2026-10-07T13:50:26.940715+00:00

MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exported configuration (courses/<:course_id>/assignments/upload_config_files). The uploaded zip file entry names are used to create paths to write files to disk without checking these paths. This vulnerability is fixed in 2.9.1.