https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T21:35:37.861365+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-67243 fkie_cve-2026-67243 2026-10-02T21:35:37.864401+00:00

freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.

 https://vulnerability.circl.lu/vuln/ghsa-3w4q-685g-qf2v GHSA-3w4q-685g-qf2v 2026-10-02T21:35:37.864604+00:00

freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.

 https://vulnerability.circl.lu/vuln/jvndb-2026-000107 jvndb-2026-000107 2026-10-02T21:35:37.864634+00:00

freo2 provided by refirio is a content management system written in PHP. freo2 contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/434.html' target='_blank'></a><ul><li>Unrestricted upload of file with dangerous type (CWE-434) - CVE-2026-67243</li></ul>Kazuki Ozawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.