https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 06:59:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-266007 EUVD-2026-266007 https://cve.radiocsirt.org/vuln/euvd-2026-266007 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3125 <p>An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with appropriate privileges can upload a malicious file to a user-controlled location on the server, potentially leading to remote code execution (RCE).</p> <p>This functionality is restricted by default to admin users; therefore, successful exploitation requires valid credentials with administrative permissions.</p> <p>An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with appropriate privileges can upload a malicious file to a user-controlled location on the server, potentially leading to remote code execution (RCE).</p> <p>This functionality is restricted by default to admin users; therefore, successful exploitation requires valid credentials with administrative permissions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-3125 https://cve.radiocsirt.org/vuln/ghsa-mg7h-mgjw-mg5g <p>An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with appropriate privileges can upload a malicious file to a user-controlled location on the server, potentially leading to remote code execution (RCE).</p> <p>This functionality is restricted by default to admin users; therefore, successful exploitation requires valid credentials with administrative permissions.</p> <p>An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with appropriate privileges can upload a malicious file to a user-controlled location on the server, potentially leading to remote code execution (RCE).</p> <p>This functionality is restricted by default to admin users; therefore, successful exploitation requires valid credentials with administrative permissions.</p> https://cve.radiocsirt.org/vuln/ghsa-mg7h-mgjw-mg5g