https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 10:01:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-262899 EUVD-2026-262899 https://cve.radiocsirt.org/vuln/euvd-2026-262899 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13428 <p>A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an &#34;IDE role&#34; to achieve Remote Code Execution (RCE) in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containing a malicious setup.py file, which would execute on the server during the installation process, leading to potential server compromise.</p> <p>No customer action is required.</p> <p>All customers have been automatically upgraded to the fixed version: 6.3.64 or higher.</p> <p>A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an &#34;IDE role&#34; to achieve Remote Code Execution (RCE) in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containing a malicious setup.py file, which would execute on the server during the installation process, leading to potential server compromise.</p> <p>No customer action is required.</p> <p>All customers have been automatically upgraded to the fixed version: 6.3.64 or higher.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13428 https://cve.radiocsirt.org/vuln/ghsa-7cf3-6632-g938 <p>A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an &#34;IDE role&#34; to achieve Remote Code Execution (RCE) in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containing a malicious setup.py file, which would execute on the server during the installation process, leading to potential server compromise.</p> <p>No customer action is required.</p> <p>All customers have been automatically upgraded to the fixed version: 6.3.64 or higher.</p> <p>A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an &#34;IDE role&#34; to achieve Remote Code Execution (RCE) in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containing a malicious setup.py file, which would execute on the server during the installation process, leading to potential server compromise.</p> <p>No customer action is required.</p> <p>All customers have been automatically upgraded to the fixed version: 6.3.64 or higher.</p> https://cve.radiocsirt.org/vuln/ghsa-7cf3-6632-g938 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2754 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Google Cloud Platform ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Google Cloud Platform ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2754