https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:02:53.420078+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0819 certfr-2023-avi-0819 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Siemens</span>. Certaines d'entr… 2026-10-03T05:02:53.484775+00:00 certfr-2023-avi-0819 https://cve.radiocsirt.org/vuln/cnvd-2023-75591 cnvd-2023-75591 2026-10-03T05:02:53.484819+00:00 cnvd-2023-75591 https://cve.radiocsirt.org/vuln/euvd-2026-219641 EUVD-2026-219641 2026-10-03T05:02:53.484842+00:00 EUVD-2026-219641 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30527 fkie_cve-2022-30527 2026-10-03T05:02:53.484854+00:00

A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

 https://cve.radiocsirt.org/vuln/ghsa-qxpm-cp83-p72g GHSA-qxpm-cp83-p72g 2026-10-03T05:02:53.484885+00:00

A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries.

This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

 https://cve.radiocsirt.org/vuln/gsd-2022-30527 gsd-2022-30527 2026-10-03T05:02:53.484903+00:00 gsd-2022-30527 https://cve.radiocsirt.org/vuln/icsa-23-285-08 ICSA-23-285-08 — Siemens SINEC NMS 2026-10-03T05:02:53.484913+00:00

The affected application assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could prepare a stored cross-site scripting (XSS) attack that may lead to unintentional modification of application data by legitimate users.