https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:47:02.469902+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-355015 EUVD-2026-355015 2026-10-05T20:47:02.474302+00:00 EUVD-2026-355015 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75840 fkie_cve-2026-75840 2026-10-05T20:47:02.474343+00:00

ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate package names. Attackers with trigger creation privileges can use Java.type() to access java.util.zip.ZipFile or java.util.jar.JarFile classes and read arbitrary files on the host system as the ArcadeDB server process.

 https://cve.radiocsirt.org/vuln/ghsa-g47p-8vrx-p85q GHSA-g47p-8vrx-p85q 2026-10-05T20:47:02.474378+00:00

ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate package names. Attackers with trigger creation privileges can use Java.type() to access java.util.zip.ZipFile or java.util.jar.JarFile classes and read arbitrary files on the host system as the ArcadeDB server process.