https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T11:57:57.442313+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280880 EUVD-2026-280880 2026-10-12T11:57:57.444229+00:00 EUVD-2026-280880 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35164 fkie_cve-2026-35164 2026-10-12T11:57:57.444257+00:00

Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability exists in the CKEditor upload functionality. It is found in app/Http/Controllers/Dashboard/CkEditorController.php within the ckupload method. The method fails to validate uploaded file types and relies entirely on user input. This allows an authenticated user to upload executable PHP scripts and gain Remote Code Execution. This vulnerability is fixed in 2.0.6.