https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 20:37:55 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351202 EUVD-2026-351202 https://cve.radiocsirt.org/vuln/euvd-2026-351202 https://cve.radiocsirt.org/vuln/fkie_cve-2026-69118 <p>Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when incidents are created, achieving remote code execution as the web server process.</p> <p>Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when incidents are created, achieving remote code execution as the web server process.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-69118 https://cve.radiocsirt.org/vuln/ghsa-9qx4-4584-p9h2 <p>Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when incidents are created, achieving remote code execution as the web server process.</p> <p>Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when incidents are created, achieving remote code execution as the web server process.</p> https://cve.radiocsirt.org/vuln/ghsa-9qx4-4584-p9h2