Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 08:45:55 +0000 EUVD-2026-237704 https://cve.radiocsirt.org/vuln/euvd-2026-237704 EUVD-2026-237704 https://cve.radiocsirt.org/vuln/euvd-2026-237704 fkie_cve-2025-46731 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46731 <p>Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch prior to 5.6.16 contains a potential remote code execution vulnerability via Twig SSTI. One must have administrator access and `ALLOW_ADMIN_CHANGES` must be enabled for this to work. Users should update to the patched versions 4.14.13 or 5.6.15 to mitigate the issue.</p> <p>Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch prior to 5.6.16 contains a potential remote code execution vulnerability via Twig SSTI. One must have administrator access and `ALLOW_ADMIN_CHANGES` must be enabled for this to work. Users should update to the patched versions 4.14.13 or 5.6.15 to mitigate the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-46731 GHSA-7c58-g782-9j38 — Craft CMS Contains a Potential Remote Code Execution Vulnerability via Twig SSTI https://cve.radiocsirt.org/vuln/ghsa-7c58-g782-9j38 <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>Craft CMS contains a potential remote code execution vulnerability via Twig SSTI. You must have administrator access and `ALLOW_ADMIN_CHANGES` must be enabled for this to work.</p> <p>https://craftcms.com/knowledge-base/securing-craft#set-allowAdminChanges-to-false-in-production</p> <p>Note: This is a follow-up to https://github.com/craftcms/cms/security/advisories/GHSA-f3cw-hg6r-chfv</p> <p>Users should update to the patched versions (4.14.13 and 5.6.15) to mitigate the issue.</p> <p>### References https://github.com/craftcms/cms/pull/17026</p> <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>Craft CMS contains a potential remote code execution vulnerability via Twig SSTI. You must have administrator access and `ALLOW_ADMIN_CHANGES` must be enabled for this to work.</p> <p>https://craftcms.com/knowledge-base/securing-craft#set-allowAdminChanges-to-false-in-production</p> <p>Note: This is a follow-up to https://github.com/craftcms/cms/security/advisories/GHSA-f3cw-hg6r-chfv</p> <p>Users should update to the patched versions (4.14.13 and 5.6.15) to mitigate the issue.</p> <p>### References https://github.com/craftcms/cms/pull/17026</p> https://cve.radiocsirt.org/vuln/ghsa-7c58-g782-9j38