https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:45:56.798621+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-go62843 CLEANSTART-2026-GO62843 — Security fix for ghsa-wphj-fx3q-84ch applied in: kibana 9.3.2-r3 2026-10-08T10:45:56.822586+00:00

Affected: CleanStart: kibana

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cve-2025-68154 CVE-2025-68154 — Command Injection in fsSize() on Windows 2026-10-08T10:45:56.822642+00:00

Affected: sebhildebrandt systeminformation

systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable to OS command injection on Windows systems. The optional `drive` parameter is directly concatenated into a PowerShell command without sanitization, allowing arbitrary command execution when user-controlled input reaches this function. The actual exploitability depends on how applications use this function. If an application does not pass user-controlled input to `fsSize()`, it is not vulnerable. Version 5.27.14 contains a patch.