https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:48:56.437577+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-54790 CVE-2025-54790 — Files: Potential for SQL Injection through File Browse and List Operations 2026-10-07T17:48:56.463583+00:00

Affected: humhub cfiles

Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, Files does not have logic to prevent the exploitation of backend SQL queries without direct output, potentially allowing unauthorized data access. This is fixed in version 0.16.10.