https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:11:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-336725 EUVD-2026-336725 https://cve.radiocsirt.org/vuln/euvd-2026-336725 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34109 <p>Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec(\&#34;php jobs/speech_audio.php \&#34;.$login_session.\&#34; \&#34;.$_GET[&#39;id&#39;].\&#34; ...\&#34;). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.</p> <p>Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec(\&#34;php jobs/speech_audio.php \&#34;.$login_session.\&#34; \&#34;.$_GET[&#39;id&#39;].\&#34; ...\&#34;). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34109 https://cve.radiocsirt.org/vuln/ghsa-f5vf-w6pf-3mgf <p>Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec(\&#34;php jobs/speech_audio.php \&#34;.$login_session.\&#34; \&#34;.$_GET[&#39;id&#39;].\&#34; ...\&#34;). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.</p> <p>Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec(\&#34;php jobs/speech_audio.php \&#34;.$login_session.\&#34; \&#34;.$_GET[&#39;id&#39;].\&#34; ...\&#34;). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-f5vf-w6pf-3mgf