https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:04:13.371414+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-13828 CVE-2025-13828 — Mautic user without privileged access to the Marketplace can install and uninstall composer packages 2026-10-07T13:04:13.390386+00:00

Affected: Mautic

SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.

ImpactA low-privileged user of the platform can install malicious code to obtain higher privileges.