https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:49:46.568455+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-209264 EUVD-2026-209264 2026-10-09T12:49:46.571537+00:00 EUVD-2026-209264 https://cve.radiocsirt.org/vuln/fkie_cve-2023-31200 fkie_cve-2023-31200 2026-10-09T12:49:46.571577+00:00

PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack.

 https://cve.radiocsirt.org/vuln/ghsa-r3mv-hv6p-6m9g GHSA-r3mv-hv6p-6m9g 2026-10-09T12:49:46.571608+00:00

PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack.

 https://cve.radiocsirt.org/vuln/gsd-2023-31200 gsd-2023-31200 2026-10-09T12:49:46.571625+00:00 gsd-2023-31200 https://cve.radiocsirt.org/vuln/icsa-23-131-13 ICSA-23-131-13 — PTC Vuforia Studio 2026-10-09T12:49:46.571637+00:00

The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication. CVE-2023-29168 has been assigned to this vulnerability. A CVSS v3 base score of 3.7 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid. CVE-2023-24476 has been assigned to this vulnerability. A CVSS v3 base score of 1.8 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N). By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account. CVE-2023-29152 has been assigned to this vulnerability. A CVSS v3 base score of 6.2 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H). A user could use the “Upload Resource” functionality to upload files to any location on the disk. CVE-2023-27881 has been assigned to this vulnerability. A CVSS v3 base score of 8.0 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). Before importing a project into Vuforia, a user could modify the “resourceDirectory” attribute in the appConfig.json file to be a different path. CVE-2023-29502 has been assigned to this vulnerability. A CVSS v3 base score of 6.2 has been calculated; the CVSS vector string is (AV…