https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:28:43.986759+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05088 bdu:2022-05088 2026-10-03T12:28:44.072789+00:00 bdu:2022-05088 https://cve.radiocsirt.org/vuln/euvd-2026-230864 EUVD-2026-230864 2026-10-03T12:28:44.072826+00:00 EUVD-2026-230864 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2788 fkie_cve-2022-2788 2026-10-03T12:28:44.072841+00:00

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code.

 https://cve.radiocsirt.org/vuln/ghsa-xwxm-hg2j-hpjq GHSA-xwxm-hg2j-hpjq 2026-10-03T12:28:44.072872+00:00

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code.

 https://cve.radiocsirt.org/vuln/gsd-2022-2788 gsd-2022-2788 2026-10-03T12:28:44.072890+00:00 gsd-2022-2788 https://cve.radiocsirt.org/vuln/icsa-22-228-06 ICSA-22-228-06 — Emerson Proficy Machine Edition 2026-10-03T12:28:44.072901+00:00

Proficy Machine Edition Version 9.00 and prior has no authentication or authorization of data packets after establishing a connection for the SRTP protocol.CVE-2022-2793 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been assigned; the CVSS vector string is (AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H). Proficy Machine Edition Version 9.00 and prior stores project data in a directory with improper access control lists.CVE-2022-2792 has been assigned to this vulnerability. A CVSS v3 base score of 6.6 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H). Proficy Machine Edition Version 9.00 and prior will upload any file written into the PLC logic folder to the connected PLC.CVE-2022-2791 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N). Proficy Machine Edition Version 9.00 and prior does not properly verify compiled logic (PDT files) and data blocks data (BLD/BLK files).CVE-2022-2790 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N). Proficy Machine Edition Version 9.00 and prior can display logic that is different than the compiled logic.CVE-2022-2789 has been assigned to this vulnerability. A CVSS v3 base score of 4.7 has been assigned; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N). Proficy Machine Edition V…