https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:05:10.684050+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-229149 EUVD-2026-229149 2026-10-03T03:05:10.773699+00:00 EUVD-2026-229149 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4098 fkie_cve-2022-4098 2026-10-03T03:05:10.773744+00:00

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.

 https://cve.radiocsirt.org/vuln/ghsa-9w34-3vc7-7786 GHSA-9w34-3vc7-7786 2026-10-03T03:05:10.773779+00:00

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. During an authenticated session to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.

 https://cve.radiocsirt.org/vuln/gsd-2022-4098 gsd-2022-4098 2026-10-03T03:05:10.773798+00:00 gsd-2022-4098 https://cve.radiocsirt.org/vuln/vde-2022-057 VDE-2022-057 — Wiesemann & Theis multiple products prone to web interface vulnerability 2026-10-03T03:05:10.773810+00:00

Multiple Wiesemann & Theis product families are affected by a vulnerability in the web interface. The device allows an unauthenticated attacker to get the session ID of a logged in user. He may then spoof his IP address to act as the logged in user.