https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:38:54.092813+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-79987 CVE-2026-79987 — Low-privilege RCE through element-search eager loading 2026-10-05T16:38:54.108888+00:00

Affected: craftcms cms

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.