https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:40:34.684476+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-627 certfr-2022-avi-627 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-02T19:40:34.688858+00:00 certfr-2022-avi-627 https://cve.radiocsirt.org/vuln/cnvd-2022-51437 cnvd-2022-51437 2026-10-02T19:40:34.688894+00:00 cnvd-2022-51437 https://cve.radiocsirt.org/vuln/euvd-2026-17513 EUVD-2026-17513 2026-10-02T19:40:34.688909+00:00 EUVD-2026-17513 https://cve.radiocsirt.org/vuln/fkie_cve-2022-33137 fkie_cve-2022-33137 2026-10-02T19:40:34.688921+00:00

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.

 https://cve.radiocsirt.org/vuln/ghsa-jp3h-x882-5crh GHSA-jp3h-x882-5crh 2026-10-02T19:40:34.688950+00:00

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.

 https://cve.radiocsirt.org/vuln/gsd-2022-33137 gsd-2022-33137 2026-10-02T19:40:34.688967+00:00 gsd-2022-33137 https://cve.radiocsirt.org/vuln/icsa-22-195-03 ICSA-22-195-03 — Siemens SIMATIC MV500 Devices 2026-10-02T19:40:34.688977+00:00

The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions. Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.