https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 01:43:22 +0000 https://cve.radiocsirt.org/vuln/cve-2025-54417 <p><strong>Affected:</strong> craftcms cms</p> <p>Craft is a platform for creating digital experiences. Versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3 contain a vulnerability that can bypass CVE-2025-23209: &#34;Craft CMS has a potential RCE with a compromised security key&#34;. To exploit this vulnerability, the project must meet these requirements: have a compromised security key and create an arbitrary file in Craft&#39;s /storage/backups folder. With those criteria in place, attackers could create a specific, malicious request to the /updater/restore-db endpoint and execute CLI commands remotely. This issue is fixed in versions 4.16.3 and 5.8.4.</p> <p><strong>Affected:</strong> craftcms cms</p> <p>Craft is a platform for creating digital experiences. Versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3 contain a vulnerability that can bypass CVE-2025-23209: &#34;Craft CMS has a potential RCE with a compromised security key&#34;. To exploit this vulnerability, the project must meet these requirements: have a compromised security key and create an arbitrary file in Craft&#39;s /storage/backups folder. With those criteria in place, attackers could create a specific, malicious request to the /updater/restore-db endpoint and execute CLI commands remotely. This issue is fixed in versions 4.16.3 and 5.8.4.</p> https://cve.radiocsirt.org/vuln/cve-2025-54417