https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:14:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-273330 EUVD-2026-273330 https://cve.radiocsirt.org/vuln/euvd-2026-273330 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23209 <p>Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a compromised security key is affected. This vulnerability has been patched in Craft 5.5.8 and 4.13.8. Users who cannot update to a patched version, should rotate their security keys and ensure their privacy to help migitgate the issue.</p> <p>Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a compromised security key is affected. This vulnerability has been patched in Craft 5.5.8 and 4.13.8. Users who cannot update to a patched version, should rotate their security keys and ensure their privacy to help migitgate the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-23209 https://cve.radiocsirt.org/vuln/ghsa-x684-96hh-833x <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>### Impact</p> <p>This is an RCE vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised.</p> <p>https://craftcms.com/knowledge-base/securing-craft#keep-your-secrets-secret</p> <p>Anyone running an unpatched version of Craft with a compromised security key is affected.</p> <p>### Patches</p> <p>This has been patched in Craft 5.5.8 and 4.13.8.</p> <p>### Workarounds</p> <p>If you can&#39;t update to a patched version, then rotating your security key and ensuring its privacy will help to migitgate the issue.</p> <p>### References</p> <p>https://github.com/craftcms/cms/commit/e59e22b30c9dd39e5e2c7fe02c147bcbd004e603</p> <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>### Impact</p> <p>This is an RCE vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised.</p> <p>https://craftcms.com/knowledge-base/securing-craft#keep-your-secrets-secret</p> <p>Anyone running an unpatched version of Craft with a compromised security key is affected.</p> <p>### Patches</p> <p>This has been patched in Craft 5.5.8 and 4.13.8.</p> <p>### Workarounds</p> <p>If you can&#39;t update to a patched version, then rotating your security key and ensuring its privacy will help to migitgate the issue.</p> <p>### References</p> <p>https://github.com/craftcms/cms/commit/e59e22b30c9dd39e5e2c7fe02c147bcbd004e603</p> https://cve.radiocsirt.org/vuln/ghsa-x684-96hh-833x