https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:21:08.522935+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03715 bdu:2022-03715 2026-10-03T18:21:08.624807+00:00 bdu:2022-03715 https://cve.radiocsirt.org/vuln/certfr-2022-avi-574 certfr-2022-avi-574 — Une vulnérabilité a été découverte dans Siemens SIMATIC WinCC OA. Elle permet à un attaquant de provoquer un contournem… 2026-10-03T18:21:08.624846+00:00 certfr-2022-avi-574 https://cve.radiocsirt.org/vuln/cnvd-2022-46963 cnvd-2022-46963 2026-10-03T18:21:08.624864+00:00 cnvd-2022-46963 https://cve.radiocsirt.org/vuln/euvd-2026-17517 EUVD-2026-17517 2026-10-03T18:21:08.624877+00:00 EUVD-2026-17517 https://cve.radiocsirt.org/vuln/fkie_cve-2022-33139 fkie_cve-2022-33139 2026-10-03T18:21:08.624887+00:00

A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration), SIMATIC WinCC OA V3.18 (All versions in non-default configuration). Affected applications use client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.

 https://cve.radiocsirt.org/vuln/ghsa-28c6-247x-r9mw GHSA-28c6-247x-r9mw 2026-10-03T18:21:08.624918+00:00

A vulnerability has been identified in SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration), SIMATIC WinCC OA V3.18 (All versions in non-default configuration). Affected applications use client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.

 https://cve.radiocsirt.org/vuln/gsd-2022-33139 gsd-2022-33139 2026-10-03T18:21:08.624935+00:00 gsd-2022-33139 https://cve.radiocsirt.org/vuln/icsa-22-172-06 ICSA-22-172-06 — Siemens WinCC OA 2026-10-03T18:21:08.624945+00:00

Affected applications use client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled.

In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.