Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:18:27 +0000 certfr-2026-avi-0739 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… https://cve.radiocsirt.org/vuln/certfr-2026-avi-0739 certfr-2026-avi-0739 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0739 EUVD-2026-329691 https://cve.radiocsirt.org/vuln/euvd-2026-329691 EUVD-2026-329691 https://cve.radiocsirt.org/vuln/euvd-2026-329691 fkie_cve-2026-40987 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40987 <p>A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the configured local-directory) with attacker-controlled content.</p> <p>Affected versions: Spring Integration 7.0.0 through 7.0.4; 6.5.0 through 6.5.8; 6.4.0 through 6.4.11; 6.3.0 through 6.3.14; 5.5.0 through 5.5.20.</p> <p>A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the configured local-directory) with attacker-controlled content.</p> <p>Affected versions: Spring Integration 7.0.0 through 7.0.4; 6.5.0 through 6.5.8; 6.4.0 through 6.4.11; 6.3.0 through 6.3.14; 5.5.0 through 5.5.20.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40987 GHSA-792x-6vq6-j8r9 — Spring Integration File Support: FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem https://cve.radiocsirt.org/vuln/ghsa-792x-6vq6-j8r9 <p><strong>Affected:</strong> Maven: org.springframework.integration:spring-integration-file</p> <p>A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the configured local-directory) with attacker-controlled content.</p> <p>Affected versions: Spring Integration 7.0.0 through 7.0.4; 6.5.0 through 6.5.8; 6.4.0 through 6.4.11; 6.3.0 through 6.3.14; 5.5.0 through 5.5.20.</p> <p><strong>Affected:</strong> Maven: org.springframework.integration:spring-integration-file</p> <p>A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the configured local-directory) with attacker-controlled content.</p> <p>Affected versions: Spring Integration 7.0.0 through 7.0.4; 6.5.0 through 6.5.8; 6.4.0 through 6.4.11; 6.3.0 through 6.3.14; 5.5.0 through 5.5.20.</p> https://cve.radiocsirt.org/vuln/ghsa-792x-6vq6-j8r9