https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:39:13.529386+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-45848 EUVD-2026-45848 2026-10-03T20:39:13.592084+00:00 EUVD-2026-45848 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25860 fkie_cve-2020-25860 2026-10-03T20:39:13.592121+00:00

The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.

 https://cve.radiocsirt.org/vuln/gsd-2020-25860 gsd-2020-25860 2026-10-03T20:39:13.592155+00:00 gsd-2020-25860 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25860 UBUNTU-CVE-2020-25860 2026-10-03T20:39:13.592167+00:00

Affected: Ubuntu:20.04:LTS: rauc, Ubuntu:22.04:LTS: rauc

The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.

 https://cve.radiocsirt.org/vuln/vde-2021-024 VDE-2021-024 — PHOENIX CONTACT: Security Advisory for PLCNext, SMARTRTU AXC, CHARX control modular and EEM-SB37x 2026-10-03T20:39:13.592191+00:00

The vulnerability is a Time-of-Check-Time-of-Use (CWE-367) issue which allows an attacker with access to the firmware update file to overwrite it after it has been verified (but before installation is completed), which consequently allows installing an arbitrary firmware update, bypassing the cryptographic signature check mechanism.