https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:20:12.883593+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-49586 CVE-2025-49586 — XWiki allows remote code execution through preview of XClass changes in AWM editor 2026-10-07T13:20:12.899623+00:00

Affected: xwiki-platform

XWiki is an open-source wiki software platform. Any XWiki user with edit right on at least one App Within Minutes application (the default for all users XWiki) can obtain programming right/perform remote code execution by editing the application. This vulnerability has been fixed in XWiki 17.0.0, 16.4.7, and 16.10.3.