https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T14:38:56.313058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-02588 cnvd-2025-02588 2026-10-20T14:38:56.316590+00:00 cnvd-2025-02588 https://cve.radiocsirt.org/vuln/euvd-2026-18286 EUVD-2026-18286 2026-10-20T14:38:56.316644+00:00 EUVD-2026-18286 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35870 fkie_cve-2022-35870 2026-10-20T14:38:56.316675+00:00

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within com.inductiveautomation.metro.impl. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17265.

 https://cve.radiocsirt.org/vuln/ghsa-9rc3-8phx-mfxx GHSA-9rc3-8phx-mfxx 2026-10-20T14:38:56.316726+00:00

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within com.inductiveautomation.metro.impl. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17265.

 https://cve.radiocsirt.org/vuln/gsd-2022-35870 gsd-2022-35870 2026-10-20T14:38:56.316761+00:00 gsd-2022-35870