https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:12:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15096 bdu:2026-15096 https://cve.radiocsirt.org/vuln/bdu:2026-15096 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1095 certfr-2026-avi-1095 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1095 https://cve.radiocsirt.org/vuln/euvd-2026-367375 EUVD-2026-367375 https://cve.radiocsirt.org/vuln/euvd-2026-367375 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82078 <p>An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process.</p> <p>An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-82078 https://cve.radiocsirt.org/vuln/ghsa-mjg5-wj9r-9mfx <p>An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process.</p> <p>An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process.</p> https://cve.radiocsirt.org/vuln/ghsa-mjg5-wj9r-9mfx https://cve.radiocsirt.org/vuln/ncsc-2026-0334 NCSC-2026-0334 https://cve.radiocsirt.org/vuln/ncsc-2026-0334