https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:00:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-342823 EUVD-2026-342823 https://cve.radiocsirt.org/vuln/euvd-2026-342823 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61343 <p>LibreBooking&#39;s email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0.</p> <p>LibreBooking&#39;s email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-61343 https://cve.radiocsirt.org/vuln/ghsa-7793-hmg3-gh57 <p>LibreBooking&#39;s email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0.</p> <p>LibreBooking&#39;s email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0.</p> https://cve.radiocsirt.org/vuln/ghsa-7793-hmg3-gh57 https://cve.radiocsirt.org/vuln/va-26-190-01 <p>LibreBooking&#39;s email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0.</p> <p>LibreBooking&#39;s email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0.</p> https://cve.radiocsirt.org/vuln/va-26-190-01