https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:46:31.411087+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05394 bdu:2022-05394 2026-10-02T17:46:31.415079+00:00 bdu:2022-05394 https://cve.radiocsirt.org/vuln/euvd-2026-217899 EUVD-2026-217899 2026-10-02T17:46:31.415117+00:00 EUVD-2026-217899 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2825 fkie_cve-2022-2825 2026-10-02T17:46:31.415138+00:00

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411.

 https://cve.radiocsirt.org/vuln/ghsa-6rww-x4m5-6j62 GHSA-6rww-x4m5-6j62 2026-10-02T17:46:31.415183+00:00

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX V6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411.

 https://cve.radiocsirt.org/vuln/gsd-2022-2825 gsd-2022-2825 2026-10-02T17:46:31.415231+00:00 gsd-2022-2825 https://cve.radiocsirt.org/vuln/icsa-22-242-10 ICSA-22-242-10 — PTC Kepware KEPServerEX (Update A) 2026-10-02T17:46:31.415249+00:00

Specifically crafted OPC UA messages transmitted to the server could allow an attacker to crash the server and leak data. CVE-2022-2848 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H). Specifically crafted OPC UA messages transmitted to the server could allow an attacker to crash the server and remotely execute code. CVE-2022-2825 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).