https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:05:59.288063+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-25041 CVE-2026-25041 — Budibase has a Command Injection in PostgreSQL Dump Command 2026-10-07T01:05:59.292916+00:00

Affected: budibase

Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.23.22 and earlier, the PostgreSQL integration constructs shell commands using user-controlled configuration values (database name, host, password, etc.) without proper sanitization. The password and other connection parameters are directly interpolated into a shell command. This affects packages/server/src/integrations/postgres.ts.