https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:02:13.351067+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-323879 EUVD-2026-323879 2026-10-06T02:02:13.408040+00:00 EUVD-2026-323879 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34906 fkie_cve-2026-34906 2026-10-06T02:02:13.408081+00:00

Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE). In the endpoint redirectToUrl and parameter redirectUrlParameter, insufficient input validation permits injection of arbitrary template expressions that are executed on the server. Successful exploitation can allow an attacker to run remote commands, including establishing a reverse shell.

This issue affects Wirtualna Uczelnia versions up to wu#2016.437.295#0#20260327_105545

 https://cve.radiocsirt.org/vuln/ghsa-4pqh-3f6p-63c5 GHSA-4pqh-3f6p-63c5 2026-10-06T02:02:13.408120+00:00

Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE). In the endpoint redirectToUrl and parameter redirectUrlParameter, insufficient input validation permits injection of arbitrary template expressions that are executed on the server. Successful exploitation can allow an attacker to run remote commands, including establishing a reverse shell.

This issue affects Wirtualna Uczelnia versions up to wu#2016.437.295#0#20260327_105545