https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:20:29.003838+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04754 bdu:2022-04754 2026-10-03T15:20:29.105638+00:00 bdu:2022-04754 https://cve.radiocsirt.org/vuln/certfr-2022-avi-896 certfr-2022-avi-896 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-03T15:20:29.105703+00:00 certfr-2022-avi-896 https://cve.radiocsirt.org/vuln/euvd-2026-231185 EUVD-2026-231185 2026-10-03T15:20:29.105724+00:00 EUVD-2026-231185 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2465 fkie_cve-2022-2465 2026-10-03T15:20:29.105738+00:00

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in ISaGRAF Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.

 https://cve.radiocsirt.org/vuln/ghsa-g35v-78wx-r6fx GHSA-g35v-78wx-r6fx 2026-10-03T15:20:29.105791+00:00

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in ISaGRAF Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.

 https://cve.radiocsirt.org/vuln/gsd-2022-2465 gsd-2022-2465 2026-10-03T15:20:29.105822+00:00 gsd-2022-2465 https://cve.radiocsirt.org/vuln/icsa-22-202-03 ICSA-22-202-03 — Rockwell Automation ISaGRAF Workbench 2026-10-03T15:20:29.105833+00:00

A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the software is running at the SYSTEM level, then the attacker will gain admin level privileges. User interaction is required for this exploit to be successful.CVE-2022-2463 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L). Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the ISaGRAF Workbench software. User interaction is required for this exploit to be successful.CVE-2022-2464 has been assigned to this vulnerability. A CVSS v3 base score of 7.7 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). ISaGRAF Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in ISaGRAF Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.CVE-2022-2465 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/sevd-2022-284-03 SEVD-2022-284-03 — ISaGRAF Workbench for SAGE RTU 2026-10-03T15:20:29.105861+00:00

Schneider Electric is aware of multiple vulnerabilities in the third party ISaGRAF Workbench software used by SAGE RTU products. The SAGE RTU products are hardware devices that collect utility substation information from different devices and passes it along to a SCADA software platform. Failure to apply the mitigations provided below may risk remote code execution, which could result in privilege escalation that will allow an attacker to gain the privileges of the software. If the software is running at SYSTEM level, an attacker may gain admin level privileges. These vulnerabilities can only be exploited when users open the TCP listening ports on the RTU and connect with ISaGRAF Workbench.