https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:43:40.582340+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02926 bdu:2022-02926 2026-10-06T01:43:40.591326+00:00 bdu:2022-02926 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0014 certfr-2023-avi-0014 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-06T01:43:40.591373+00:00 certfr-2023-avi-0014 https://cve.radiocsirt.org/vuln/cnvd-2023-94706 cnvd-2023-94706 2026-10-06T01:43:40.591405+00:00 cnvd-2023-94706 https://cve.radiocsirt.org/vuln/euvd-2026-230914 EUVD-2026-230914 2026-10-06T01:43:40.591429+00:00 EUVD-2026-230914 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1467 fkie_cve-2022-1467 2026-10-06T01:43:40.591449+00:00

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.

 https://cve.radiocsirt.org/vuln/ghsa-2hvg-pfw9-r56c GHSA-2hvg-pfw9-r56c 2026-10-06T01:43:40.591496+00:00

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.

 https://cve.radiocsirt.org/vuln/gsd-2022-1467 gsd-2022-1467 2026-10-06T01:43:40.591528+00:00 gsd-2022-1467 https://cve.radiocsirt.org/vuln/icsa-22-130-05 ICSA-22-130-05 — AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere 2026-10-06T01:43:40.591546+00:00

Windows OS can be configured to overlay a language bar on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.CVE-2022-1467 has been assigned to this vulnerability. A CVSS v3 base score of 7.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L).

 https://cve.radiocsirt.org/vuln/sevd-2023-010-04 SEVD-2023-010-04 — EcoStruxure™ Power SCADA Anywhere 2026-10-06T01:43:40.591581+00:00

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power SCADA Anywhere product. EcoStruxure™ Power SCADA Anywhere is an on-premises software that provides remote web browser access to the EcoStruxure Power Operation desktop HMI client application and its operator interface. Failure to apply with the mitigations provided below may risk an authenticated user to escape from the context of EcoStruxure™ Power SCADA Anywhere into the Operating System (OS), which could result in arbitrary OS commands being executed on the system.