https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:32:37.006038+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02117 bdu:2023-02117 2026-10-02T17:32:37.012791+00:00 bdu:2023-02117 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0297 certfr-2023-avi-0297 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-02T17:32:37.012825+00:00 certfr-2023-avi-0297 https://cve.radiocsirt.org/vuln/euvd-2026-213892 EUVD-2026-213892 2026-10-02T17:32:37.012843+00:00 EUVD-2026-213892 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29412 fkie_cve-2023-29412 2026-10-02T17:32:37.012855+00:00

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

 https://cve.radiocsirt.org/vuln/ghsa-7p8q-cvq9-54g6 GHSA-7p8q-cvq9-54g6 2026-10-02T17:32:37.012880+00:00

A CWE-78: Improper Handling of Case Sensitivity vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

 https://cve.radiocsirt.org/vuln/gsd-2023-29412 gsd-2023-29412 2026-10-02T17:32:37.012895+00:00 gsd-2023-29412 https://cve.radiocsirt.org/vuln/icsa-23-108-02 ICSA-23-108-02 — Schneider Electric APC Easy UPS Online Monitoring Software (Update A) 2026-10-02T17:32:37.012905+00:00

A vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface. Prior versions of Schneider Electric APC Easy UPS Online contain an OS Command Injection vulnerability that could cause remote code execution when manipulating internal methods through Java RMI interface. A vulnerability exists that could cause a denial-of-service condition when accessed by an unauthenticated user on the Schneider UPS Monitor service.

 https://cve.radiocsirt.org/vuln/sevd-2023-101-04 SEVD-2023-101-04 — Easy UPS Online Monitoring Software 2026-10-02T17:32:37.012926+00:00

Schneider Electric is aware of multiple vulnerabilities in its Easy UPS Online Monitoring Software, known as APC Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring Software known as Schneider SP Series UPS Online Monitoring Software in China.

The Easy UPS Online Monitoring Software is used to configure and manage Easy UPS products.

Failure to apply the remediations provided below may risk remote code execution, escalation of privileges, or authentication bypass, which could result in execution of malicious web code or loss of device functionality.

June 2024 Update: Vulnerability description for CVE-2023-29412 has been updated. CWE-78 is correct, but the initial description didn’t match with this CWE ID. Remediation instructions were updated to clarify support status.