https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:03:20.981763+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-363476 EUVD-2026-363476 2026-10-06T19:03:21.043837+00:00 EUVD-2026-363476 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85040 fkie_cve-2026-85040 2026-10-06T19:03:21.043877+00:00

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Vendor documents this as deliberate debug-only behavior. But isSafePhpCode blacklist offers no real RCE containment.

 https://cve.radiocsirt.org/vuln/ghsa-q67v-wjjm-5rv3 GHSA-q67v-wjjm-5rv3 2026-10-06T19:03:21.043914+00:00

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Vendor documents this as deliberate debug-only behavior. But isSafePhpCode blacklist offers no real RCE containment.