https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:23:33.783148+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-10131 cnvd-2020-10131 2026-10-05T10:23:33.786867+00:00 cnvd-2020-10131 https://cve.radiocsirt.org/vuln/euvd-2026-58980 EUVD-2026-58980 2026-10-05T10:23:33.786900+00:00 EUVD-2026-58980 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18998 fkie_cve-2019-18998 2026-10-05T10:23:33.786914+00:00

Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An attacker with knowledge of a resource's URL can access the resource directly.

 https://cve.radiocsirt.org/vuln/ghsa-wxxj-xqh4-vhm2 GHSA-wxxj-xqh4-vhm2 2026-10-05T10:23:33.786944+00:00

Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An attacker with knowledge of a resource's URL can access the resource directly.

 https://cve.radiocsirt.org/vuln/gsd-2019-18998 gsd-2019-18998 2026-10-05T10:23:33.786960+00:00 gsd-2019-18998 https://cve.radiocsirt.org/vuln/icsa-20-072-02 ICSA-20-072-02 — ABB Asset Suite 2026-10-05T10:23:33.786971+00:00

There is a flaw in the access controls used to limit user access to resources. If an attacker knows, or were to discover, the URL for a resource they do not have permissions to, they would be able to access the resource by browsing directly to the URL.CVE-2019-18998 has been assigned to this vulnerability. A CVSS v3 base score of 7.1 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).