https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:56:45.517485+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-221117 EUVD-2026-221117 2026-10-10T19:56:45.520514+00:00 EUVD-2026-221117 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22344 fkie_cve-2023-22344 2026-10-10T19:56:45.520545+00:00

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

 https://cve.radiocsirt.org/vuln/ghsa-63wr-jpff-c77r GHSA-63wr-jpff-c77r 2026-10-10T19:56:45.520577+00:00

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

 https://cve.radiocsirt.org/vuln/gsd-2023-22344 gsd-2023-22344 2026-10-10T19:56:45.520594+00:00 gsd-2023-22344 https://cve.radiocsirt.org/vuln/jvndb-2023-000021 jvndb-2023-000021 2026-10-10T19:56:45.520606+00:00

SS1 is asset management software and Rakuraku PC Cloud is cloud-based asset management service. SS1 and Rakuraku PC Cloud Agent contain multiple vulnerabilities listed below. <ul><li>Improper Access Control (CWE-284) - CVE-2023-22335</li><li>Path Traversal (CWE-22) - CVE-2023-22336</li><li>Use of Hard-coded Credentials (CWE-798) - CVE-2023-22344</li></ul> Denis Faiustov, and Ruslan Sayfiev of GMO Cyber Security by IERAE reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.