https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:14:45.064777+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325853 EUVD-2026-325853 2026-10-07T09:14:45.097368+00:00 EUVD-2026-325853 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46390 fkie_cve-2026-46390 2026-10-07T09:14:45.097405+00:00

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 2.0.0 and prior to version 26.0.0, the gitlist plugin is exposed to unauthenticated users, allowing unauthenticated browsing of git repositories and git history. Version 26.0.0 patches the issue.