https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:18:23.602005+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08857 bdu:2023-08857 2026-10-04T01:18:23.704642+00:00 bdu:2023-08857 https://cve.radiocsirt.org/vuln/euvd-2026-8341 EUVD-2026-8341 2026-10-04T01:18:23.704673+00:00 EUVD-2026-8341 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27990 fkie_cve-2023-27990 2026-10-04T01:18:23.704687+00:00

The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device.

 https://cve.radiocsirt.org/vuln/ghsa-6qw9-cqm2-283v GHSA-6qw9-cqm2-283v 2026-10-04T01:18:23.704716+00:00

The XSS vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device.

 https://cve.radiocsirt.org/vuln/gsd-2023-27990 gsd-2023-27990 2026-10-04T01:18:23.704735+00:00 gsd-2023-27990 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1070 WID-SEC-W-2023-1070 — Zyxel Firewalls: Mehrere Schwachstellen 2026-10-04T01:18:23.704746+00:00

Ein Angreifer kann mehrere Schwachstellen in Zyxel Firewall ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service zu verursachen, einen Cross Site Scripting Angriff durchzuführen oder die Konfiguration zu manipulieren.