https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:35:33 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-67243 <p>freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.</p> <p>freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-67243 https://vulnerability.circl.lu/vuln/ghsa-3w4q-685g-qf2v <p>freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.</p> <p>freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.</p> https://vulnerability.circl.lu/vuln/ghsa-3w4q-685g-qf2v https://vulnerability.circl.lu/vuln/jvndb-2026-000107 <p>freo2 provided by refirio is a content management system written in PHP. freo2 contains the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Unrestricted upload of file with dangerous type (CWE-434) - CVE-2026-67243&lt;/li&gt;&lt;/ul&gt;Kazuki Ozawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>freo2 provided by refirio is a content management system written in PHP. freo2 contains the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Unrestricted upload of file with dangerous type (CWE-434) - CVE-2026-67243&lt;/li&gt;&lt;/ul&gt;Kazuki Ozawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://vulnerability.circl.lu/vuln/jvndb-2026-000107