https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:10:20.716241+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343923 EUVD-2026-343923 2026-10-07T19:10:20.779546+00:00 EUVD-2026-343923 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67308 fkie_cve-2026-67308 2026-10-07T19:10:20.779587+00:00

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly interpolated into run steps, enabling command execution and exfiltration of secrets including GITHUB_TOKEN and AWS credentials on self-hosted runners.

 https://cve.radiocsirt.org/vuln/ghsa-9chj-cp8j-3c5f GHSA-9chj-cp8j-3c5f 2026-10-07T19:10:20.779623+00:00

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly interpolated into run steps, enabling command execution and exfiltration of secrets including GITHUB_TOKEN and AWS credentials on self-hosted runners.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2620 WID-SEC-W-2026-2620 — Wazuh: Mehrere Schwachstellen 2026-10-07T19:10:20.779641+00:00

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um Dateien zu manipulieren, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.