{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3axerteonline_toolkits/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:xerte:online_toolkits:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-117607"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Xerte Online Toolkits (through 3.15.5)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Xerte"],"content_html":"\u003cp\u003eXerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability. Authenticated users with system permissions can run PHP code by importing a crafted language pack. Attackers can upload a ZIP file via \u003ccode\u003eimport_language.php\u003c/code\u003e containing a \u003ccode\u003e.inc\u003c/code\u003e file and request it through the \u003ccode\u003elanguage\u003c/code\u003e parameter to execute code on the server.\u003c/p\u003e\n","date_modified":"2026-10-28T08:26:29Z","date_published":"2026-10-28T08:26:29Z","id":"https://feed.craftedsignal.io/briefs/2026-10-xerte-rce/","summary":"Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with system permission to run PHP by importing a crafted language pack.","title":"Xerte Online Toolkits: Authenticated remote code execution (CVE-2026-117607)","url":"https://feed.craftedsignal.io/briefs/2026-10-xerte-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:xerte:online_toolkits:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}