https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T04:28:38.596864+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01723 bdu:2022-01723 2026-10-17T04:28:38.695430+00:00 bdu:2022-01723 https://cve.radiocsirt.org/vuln/cnvd-2021-34432 cnvd-2021-34432 2026-10-17T04:28:38.695482+00:00 cnvd-2021-34432 https://cve.radiocsirt.org/vuln/euvd-2026-231246 EUVD-2026-231246 2026-10-17T04:28:38.695512+00:00 EUVD-2026-231246 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27475 fkie_cve-2021-27475 2026-10-17T04:28:38.695536+00:00

Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.

 https://cve.radiocsirt.org/vuln/ghsa-q489-3x56-hq57 GHSA-q489-3x56-hq57 2026-10-17T04:28:38.695593+00:00

Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.

 https://cve.radiocsirt.org/vuln/gsd-2021-27475 gsd-2021-27475 2026-10-17T04:28:38.695633+00:00 gsd-2021-27475 https://cve.radiocsirt.org/vuln/icsa-21-133-01 ICSA-21-133-01 — Rockwell Automation Connected Components Workbench 2026-10-17T04:28:38.695659+00:00

Connected Components Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.CVE-2021-27475 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files that, when opened by Connected Components Workbench, can traverse the file system. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the Connected Components Workbench software. User interaction is required for this exploit to be successful.CVE-2021-27471 has been assigned to this vulnerability. A CVSS v3 base score of 7.7 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). Connected Components Workbench does not sanitize paths specified within the .ccwarc archive file during extraction. This type of vulnerability is also commonly referred to as a Zip Slip. A local, authenticated attacker can create a malicious .ccwarc archive file that, when opened by Connected Components Workbench, will allow the attacker to g…