Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:43:01 +0000 EUVD-2026-379552 https://cve.radiocsirt.org/vuln/euvd-2026-379552 EUVD-2026-379552 https://cve.radiocsirt.org/vuln/euvd-2026-379552 fkie_cve-2026-61875 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61875 <p>luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers can send malicious HTML in the NewPortMappingDescription field, which miniupnpd stores and luci-app-upnp renders without output encoding, executing the payload when administrators view the UPnP or Status pages.</p> <p>luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers can send malicious HTML in the NewPortMappingDescription field, which miniupnpd stores and luci-app-upnp renders without output encoding, executing the payload when administrators view the UPnP or Status pages.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-61875 GHSA-xwgp-pprm-vcx3 https://cve.radiocsirt.org/vuln/ghsa-xwgp-pprm-vcx3 <p>luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers can send malicious HTML in the NewPortMappingDescription field, which miniupnpd stores and luci-app-upnp renders without output encoding, executing the payload when administrators view the UPnP or Status pages.</p> <p>luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers can send malicious HTML in the NewPortMappingDescription field, which miniupnpd stores and luci-app-upnp renders without output encoding, executing the payload when administrators view the UPnP or Status pages.</p> https://cve.radiocsirt.org/vuln/ghsa-xwgp-pprm-vcx3