https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:04:57.256031+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02342 bdu:2023-02342 2026-10-03T11:04:57.362568+00:00 bdu:2023-02342 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0304 certfr-2023-avi-0304 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un att… 2026-10-03T11:04:57.362635+00:00 certfr-2023-avi-0304 https://cve.radiocsirt.org/vuln/cnvd-2023-30842 cnvd-2023-30842 2026-10-03T11:04:57.362670+00:00 cnvd-2023-30842 https://cve.radiocsirt.org/vuln/euvd-2026-196893 EUVD-2026-196893 2026-10-03T11:04:57.362692+00:00 EUVD-2026-196893 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35850 fkie_cve-2022-35850 2026-10-03T11:04:57.362716+00:00

An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versions 6.4.0 through 6.4.4, 6.3.0 through 6.3.3, all versions of 6.2 and 6.1 may allow a remote unauthenticated attacker to trigger a reflected cross site scripting (XSS) attack via the "reset-password" page.

 https://cve.radiocsirt.org/vuln/ghsa-v7ch-cx27-643j GHSA-v7ch-cx27-643j 2026-10-03T11:04:57.362780+00:00

An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versions 6.4.0 through 6.4.4, 6.3.0 through 6.3.3, all versions of 6.2 and 6.1 may allow a remote unauthenticated attacker to trigger a reflected cross site scripting (XSS) attack via the "reset-password" page.

 https://cve.radiocsirt.org/vuln/gsd-2022-35850 gsd-2022-35850 2026-10-03T11:04:57.362811+00:00 gsd-2022-35850 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0930 WID-SEC-W-2023-0930 — Fortinet FortiAuthenticator: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-03T11:04:57.362832+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Fortinet FortiAuthenticator ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.