https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:15:42.383441+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319353 EUVD-2026-319353 2026-10-06T04:15:42.433214+00:00 EUVD-2026-319353 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8739 fkie_cve-2026-8739 2026-10-06T04:15:42.433252+00:00

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefile_key results in use of hard-coded cryptographic key . The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-2352-54f8-q7h5 GHSA-2352-54f8-q7h5 2026-10-06T04:15:42.433285+00:00

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefile_key results in use of hard-coded cryptographic key . The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.