https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T12:35:18.117623+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331346 EUVD-2026-331346 2026-10-10T12:35:18.164436+00:00 EUVD-2026-331346 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56137 fkie_cve-2026-56137 2026-10-10T12:35:18.164473+00:00

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.

 https://cve.radiocsirt.org/vuln/ghsa-f7jr-jmf8-58m2 GHSA-f7jr-jmf8-58m2 2026-10-10T12:35:18.164506+00:00

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000093 jvndb-2026-000093 2026-10-10T12:35:18.164523+00:00

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. are game development tools, which provide "save data" facility to create a file to preserve game status and related parameters. A user can save the current game status to a save-file, and later load the file to resume playing the game. When loading a save-file, RPG MAKER MV and MZ fail to properly treat crafted contents, and may lead to OS command injection.<a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><ul><li>OS Command Injection (CWE-78) - CVE-2026-56137</li></ul>Shuta Ide of GMO Flatt Security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.