https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:40:45 +0000 https://cve.radiocsirt.org/vuln/cve-2026-57311 <p><strong>Affected:</strong> JCD Windu CMS</p> <p>Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution.</p> <p>Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other versions.</p> <p><strong>Affected:</strong> JCD Windu CMS</p> <p>Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution.</p> <p>Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other versions.</p> https://cve.radiocsirt.org/vuln/cve-2026-57311