https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:46:33.216532+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-180105 EUVD-2026-180105 2026-10-04T23:46:33.298436+00:00 EUVD-2026-180105 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22509 fkie_cve-2022-22509 2026-10-04T23:46:33.298484+00:00

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.

 https://cve.radiocsirt.org/vuln/ghsa-rh2h-p77p-xw9h GHSA-rh2h-p77p-xw9h 2026-10-04T23:46:33.298529+00:00

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.

 https://cve.radiocsirt.org/vuln/gsd-2022-22509 gsd-2022-22509 2026-10-04T23:46:33.298559+00:00 gsd-2022-22509 https://cve.radiocsirt.org/vuln/vde-2022-001 VDE-2022-001 — PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment 2026-10-04T23:46:33.298581+00:00

The user management of the FL SWITCH 2xxx family of devices implements access rights based on roles and permission groups. An unprivileged user logged in via the SSH CLI is assigned to the admin role independent of his configured access role enabling full access to the device configuration (CWE-266 - Incorrect Privilege Assignment).

User Management via SSH was first introduced with firmware version 3.00. Firmware versions other than 3.00 are not affected by this vulnerability.