https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:10:02.273518+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341251 EUVD-2026-341251 2026-10-07T00:10:02.276572+00:00 EUVD-2026-341251 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57916 fkie_cve-2026-57916 2026-10-07T00:10:02.276604+00:00

proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the application, the specified file will be executed (or webpage will be opened).

This issue was fixed in version 9.4.3.90.

 https://cve.radiocsirt.org/vuln/ghsa-m7cq-h27p-hwp4 GHSA-m7cq-h27p-hwp4 2026-10-07T00:10:02.276639+00:00

proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the application, the specified file will be executed (or webpage will be opened).

This issue was fixed in version 9.4.3.90.