https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:21:54.340029+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-17497 cnvd-2020-17497 2026-10-02T14:21:54.343594+00:00 cnvd-2020-17497 https://cve.radiocsirt.org/vuln/euvd-2026-49953 EUVD-2026-49953 2026-10-02T14:21:54.343625+00:00 EUVD-2026-49953 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5135 fkie_cve-2019-5135 2026-10-02T14:21:54.343639+00:00

An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt() function which can be exploited to disclose hashed user credentials. This affects WAGO PFC200 Firmware version 03.00.39(12) and version 03.01.07(13), and WAGO PFC100 Firmware version 03.00.39(12).

 https://cve.radiocsirt.org/vuln/ghsa-pgq5-f878-vwpf GHSA-pgq5-f878-vwpf 2026-10-02T14:21:54.343668+00:00

An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt() function which can be exploited to disclose hashed user credentials. This affects WAGO PFC200 Firmware version 03.00.39(12) and version 03.01.07(13), and WAGO PFC100 Firmware version 03.00.39(12).

 https://cve.radiocsirt.org/vuln/gsd-2019-5135 gsd-2019-5135 2026-10-02T14:21:54.343685+00:00 gsd-2019-5135 https://cve.radiocsirt.org/vuln/vde-2020-006 VDE-2020-006 — WAGO: Web-Based Management Authentication Vulnerabilities 2026-10-02T14:21:54.343696+00:00

An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO PFC100 version 03.00.39(12). A specially crafted authentication request can bypass regular expression filters, resulting in sensitive information disclosure. An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt() function which can be exploited to disclose hashed user credentials. This affects WAGO PFC200 Firmware version 03.00.39(12) and version 03.01.07(13), and WAGO PFC100 Firmware version 03.00.39(12).