https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:47:20.978715+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-66798 EUVD-2026-66798 2026-10-03T04:47:20.983494+00:00 EUVD-2026-66798 https://cve.radiocsirt.org/vuln/fkie_cve-2018-13992 fkie_cve-2018-13992 2026-10-03T04:47:20.983528+00:00

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.

 https://cve.radiocsirt.org/vuln/ghsa-m9g7-24wc-gw4q GHSA-m9g7-24wc-gw4q 2026-10-03T04:47:20.983559+00:00

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.

 https://cve.radiocsirt.org/vuln/gsd-2018-13992 gsd-2018-13992 2026-10-03T04:47:20.983576+00:00 gsd-2018-13992 https://cve.radiocsirt.org/vuln/icsa-19-024-02 ICSA-19-024-02 — PHOENIX CONTACT FL SWITCH 2026-10-03T04:47:20.983588+00:00

This vulnerability may allow an attacker to trick the web browser into transmitting unwanted commands.CVE-2018-13993 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The switch lacks a login time-out feature to prevent high-speed automated username and password combination guessing. An attacker may gain access by brute forcing of usernames and passwords.CVE-2018-13990 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). The default setting of the Web UI (HTTP) allows user credentials to be transmitted unencrypted.CVE-2018-13992 has been assigned to this vulnerability. A CVSS v3 base score of 8.2 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N). An attacker can initiate a web denial-of-service attack by producing an excessive number of Web UI connections.CVE-2018-13994 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). An attacker may extract the switch 's default private keys from its firmware image.CVE-2018-13991 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Buffer errors in the existing switch security library may allow a de…

 https://cve.radiocsirt.org/vuln/vde-2019-001 VDE-2019-001 — PHOENIX CONTACT: Multiple Vulnerabilities in FL SWITCH 3xxx, 4xxx and 48xx 2026-10-03T04:47:20.983622+00:00

Multiple vulnerabilities for FL SWITCH have been identified in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx version 1.0 to 1.34.