https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:49:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-37916 EUVD-2026-37916 https://cve.radiocsirt.org/vuln/euvd-2026-37916 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7472 <p>An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. (This is exploitable even after installation is completed.).</p> <p>An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. (This is exploitable even after installation is completed.).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7472 https://cve.radiocsirt.org/vuln/ghsa-rc9r-x5j2-h9cq <p>An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. (This is exploitable even after installation is completed.).</p> <p>An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. (This is exploitable even after installation is completed.).</p> https://cve.radiocsirt.org/vuln/ghsa-rc9r-x5j2-h9cq https://cve.radiocsirt.org/vuln/gsd-2020-7472 gsd-2020-7472 https://cve.radiocsirt.org/vuln/gsd-2020-7472