https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:22:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-355284 EUVD-2026-355284 https://cve.radiocsirt.org/vuln/euvd-2026-355284 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34398 <p>FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval(), allowing arbitrary Python code execution when a user loads a malicious BIM project template. This issue is fixed in version 1.1.1.</p> <p>FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval(), allowing arbitrary Python code execution when a user loads a malicious BIM project template. This issue is fixed in version 1.1.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34398 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34398 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freecad, Ubuntu:18.04:LTS: freecad, Ubuntu:20.04:LTS: freecad, Ubuntu:22.04:LTS: freecad</p> <p>FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval(), allowing arbitrary Python code execution when a user loads a malicious BIM project template. This issue is fixed in version 1.1.1.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freecad, Ubuntu:18.04:LTS: freecad, Ubuntu:20.04:LTS: freecad, Ubuntu:22.04:LTS: freecad</p> <p>FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval(), allowing arbitrary Python code execution when a user loads a malicious BIM project template. This issue is fixed in version 1.1.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34398