https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T11:58:19.864944+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-50789 CVE-2022-50789 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php 2026-10-09T11:58:19.881921+00:00

Affected: SOUND4 Ltd. Impact/Pulse/First, SOUND4 Ltd. Impact/Pulse Eco, SOUND4 Ltd. BigVoice4, SOUND4 Ltd. BigVoice2, SOUND4 Ltd. Stream, Kantar Media WM2

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory with .dns.pid extension. Unauthenticated attackers can execute the malicious commands by making a single HTTP POST request to the vulnerable dns.php script, which triggers command execution and then deletes the file.