https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:52:39.534716+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-706 certfr-2021-avi-706 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-04T02:52:39.609002+00:00 certfr-2021-avi-706 https://cve.radiocsirt.org/vuln/cnvd-2021-71440 cnvd-2021-71440 2026-10-04T02:52:39.609055+00:00 cnvd-2021-71440 https://cve.radiocsirt.org/vuln/euvd-2026-31162 EUVD-2026-31162 2026-10-04T02:52:39.609077+00:00 EUVD-2026-31162 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40354 fkie_cve-2021-40354 2026-10-04T02:52:39.609097+00:00

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The "surrogate" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the "inbox/surrogate tasks".

 https://cve.radiocsirt.org/vuln/ghsa-xcq8-3527-6285 GHSA-xcq8-3527-6285 2026-10-04T02:52:39.609146+00:00

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The "surrogate" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the "inbox/surrogate tasks".

 https://cve.radiocsirt.org/vuln/gsd-2021-40354 gsd-2021-40354 2026-10-04T02:52:39.609180+00:00 gsd-2021-40354 https://cve.radiocsirt.org/vuln/icsa-21-257-08 ICSA-21-257-08 — Siemens Teamcenter 2026-10-04T02:52:39.609198+00:00

The "surrogate" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the "inbox/surrogate tasks". The affected application contains Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to use user-supplied input to access objects directly. The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.