https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T08:17:24.039638+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-35488 CVE-2021-35488 2026-10-19T08:17:24.040647+00:00

Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.