https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:50:01.361759+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-210875 EUVD-2026-210875 2026-10-09T12:50:01.365088+00:00 EUVD-2026-210875 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47311 fkie_cve-2022-47311 2026-10-09T12:50:01.365120+00:00

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.

 https://cve.radiocsirt.org/vuln/ghsa-98hm-c56g-vjqc GHSA-98hm-c56g-vjqc 2026-10-09T12:50:01.365152+00:00

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.

 https://cve.radiocsirt.org/vuln/gsd-2022-47311 gsd-2022-47311 2026-10-09T12:50:01.365170+00:00 gsd-2022-47311 https://cve.radiocsirt.org/vuln/icsa-22-263-03 ICSA-22-263-03 — Dataprobe iBoot-PDU 2026-10-09T12:50:01.365181+00:00

A specific function does not sanitize the input provided by the user, which may expose the affected an OS command injection vulnerability. CVE-2022-3183 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The device�s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may allow a user to write a file to the webroot directory. CVE-2022-3184 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product exposes sensitive data concerning the device. CVE-2022-3185 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). The affected product allows an attacker to access the device�s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other device's information. CVE-2022-3186 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N). Certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of veri…