https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:02:35.884469+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-01837 bdu:2023-01837 2026-10-04T04:02:35.888238+00:00 bdu:2023-01837 https://cve.radiocsirt.org/vuln/euvd-2026-219136 EUVD-2026-219136 2026-10-04T04:02:35.888268+00:00 EUVD-2026-219136 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26080 fkie_cve-2022-26080 2026-10-04T04:02:35.888283+00:00

Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

 https://cve.radiocsirt.org/vuln/ghsa-cwxp-h4pj-wvp5 GHSA-cwxp-h4pj-wvp5 2026-10-04T04:02:35.888312+00:00

Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

 https://cve.radiocsirt.org/vuln/gsd-2022-26080 gsd-2022-26080 2026-10-04T04:02:35.888329+00:00 gsd-2022-26080 https://cve.radiocsirt.org/vuln/icsa-23-082-05 ICSA-23-082-05 — ABB Pulsar Plus Controller 2026-10-04T04:02:35.888340+00:00

There are several fields in the web pages where a user can enter arbitrary text such as a description of an alarm or a rectifier. These represent a cross site scripting vulnerability where javascript code can be entered as the description with the potential of causing system interactions unknown to the user. These issues were remediated by adding a check of every field update to reject suspicious entries. CVE-2022-1607 has been assigned to this vulnerability. A CVSS v3 base score of 4.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N). Every interaction with the web server requires a Session ID that is assigned to the session after a successful login. The reported vulnerability is that the Session IDs were too short (16 bits), too predictable (IDs simply incremented), and were plainly visible in the URLs of the web pages. These issues were remediated by rewriting the web server to follow recommended best practices. CVE-2022-26080 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N).