https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:26:14.179114+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01110 bdu:2021-01110 2026-10-02T15:26:14.185814+00:00 bdu:2021-01110 https://cve.radiocsirt.org/vuln/certfr-2021-avi-024 certfr-2021-avi-024 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Elles permettent à un attaquant d… 2026-10-02T15:26:14.185853+00:00 certfr-2021-avi-024 https://cve.radiocsirt.org/vuln/cnvd-2021-31180 cnvd-2021-31180 2026-10-02T15:26:14.185872+00:00 cnvd-2021-31180 https://cve.radiocsirt.org/vuln/euvd-2026-23122 EUVD-2026-23122 2026-10-02T15:26:14.185884+00:00 EUVD-2026-23122 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22697 fkie_cve-2021-22697 2026-10-02T15:26:14.185895+00:00

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

 https://cve.radiocsirt.org/vuln/ghsa-wrwf-2jpv-j2gv GHSA-wrwf-2jpv-j2gv 2026-10-02T15:26:14.185922+00:00

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

 https://cve.radiocsirt.org/vuln/gsd-2021-22697 gsd-2021-22697 2026-10-02T15:26:14.185937+00:00 gsd-2021-22697 https://cve.radiocsirt.org/vuln/icsa-21-012-01 ICSA-21-012-01 — Schneider Electric EcoStruxure Power Build-Rapsody (Update A) 2026-10-02T15:26:14.185955+00:00

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed. When a malicious SSD file is uploaded and improperly parsed, an attacker could cause a use-after-free condition or stack-based buffer overflow resulting in remote code execution.

 https://cve.radiocsirt.org/vuln/sevd-2021-012-02 SEVD-2021-012-02 — EcoStruxure Power Build - Rapsody 2026-10-02T15:26:14.185976+00:00

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Build - Rapsody product. The EcoStruxure Power Build - Rapsody product is a LV switchboard configuration and quotation software to support users in the configuration and quotation process for Prisma switchboard projects in the non-critical building segment. Failure to apply the mitigations provided below may allow remote code execution which could result in serious interruption of business operations and exfiltration of credentials and other business sensitive data. June 2022 Update: Remediation added