https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:55:34.995458+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04926 bdu:2022-04926 2026-10-02T23:55:35.001527+00:00 bdu:2022-04926 https://cve.radiocsirt.org/vuln/certfr-2022-avi-124 certfr-2022-avi-124 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-02T23:55:35.001558+00:00 certfr-2022-avi-124 https://cve.radiocsirt.org/vuln/cnvd-2022-10001 cnvd-2022-10001 2026-10-02T23:55:35.001577+00:00 cnvd-2022-10001 https://cve.radiocsirt.org/vuln/euvd-2026-31156 EUVD-2026-31156 2026-10-02T23:55:35.001589+00:00 EUVD-2026-31156 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40360 fkie_cve-2021-40360 2026-10-02T23:55:35.001599+00:00

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 6). The password hash of a local user account in the remote server could be granted via public API to a user on the affected system. An authenticated attacker could brute force the password hash and use it to login to the server.

 https://cve.radiocsirt.org/vuln/ghsa-8hg6-3x59-7xjr GHSA-8hg6-3x59-7xjr 2026-10-02T23:55:35.001630+00:00

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 and earlier (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 6). The password hash of a local user account in the remote server could be granted via public API to a user on the affected system. An authenticated attacker could brute force the password hash and use it to login to the server.

 https://cve.radiocsirt.org/vuln/gsd-2021-40360 gsd-2021-40360 2026-10-02T23:55:35.001649+00:00 gsd-2021-40360 https://cve.radiocsirt.org/vuln/icsa-22-041-02 ICSA-22-041-02 — Siemens SIMATIC WinCC and PCS 2026-10-02T23:55:35.001660+00:00

The password hash of a local user account in the remote server could be granted via public API to a user on the affected system. An authenticated attacker could brute force the password hash and use it to login to the server. The affected component stores the credentials of a local system account in a potentially publicly accessible project file using an outdated cipher algorithm. An attacker may use this to brute force the credentials and take over the system.