https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T08:45:37.170322+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-26473 CVE-2021-26473 — Unauthenticated arbitrary file upload and command execution in Vembu products 2026-10-12T08:45:37.171451+00:00

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to write arbitrary files in the context of the web server process. These files can then be executed remotely by calling the file via the web server.