https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:39:39.341411+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-230993 EUVD-2026-230993 2026-10-02T19:39:39.344743+00:00 EUVD-2026-230993 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25166 fkie_cve-2020-25166 2026-10-02T19:39:39.344774+00:00

An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper with devices.

 https://cve.radiocsirt.org/vuln/ghsa-mwfc-gqvv-7hq8 GHSA-mwfc-gqvv-7hq8 2026-10-02T19:39:39.344804+00:00

An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper with devices.

 https://cve.radiocsirt.org/vuln/gsd-2020-25166 gsd-2020-25166 2026-10-02T19:39:39.344822+00:00 gsd-2020-25166 https://cve.radiocsirt.org/vuln/icsma-20-296-02 ICSMA-20-296-02 — B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus 2026-10-02T19:39:39.344833+00:00

A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations. CVE-2020-25158 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L). An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to redirect users to malicious websites. CVE-2020-25154 has been assigned to this vulnerability. A CVSS v3 base score of 5.4 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N). A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remote attackers to access sensitive information and escalate privileges. CVE-2020-25162 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate…