https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:59:16.011169+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08277 bdu:2023-08277 2026-10-03T16:59:16.103076+00:00 bdu:2023-08277 https://cve.radiocsirt.org/vuln/euvd-2026-8748 EUVD-2026-8748 2026-10-03T16:59:16.103113+00:00 EUVD-2026-8748 https://cve.radiocsirt.org/vuln/fkie_cve-2023-35139 fkie_cve-2023-35139 2026-10-03T16:59:16.103128+00:00

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5.00 through 5.37, USG FLEX 50(W) series firmware versions 5.10 through 5.37, USG20(W)-VPN series firmware versions 5.10 through 5.37, and VPN series firmware versions 5.00 through 5.37, could allow an unauthenticated LAN-based attacker to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed to steal cookies when the user visits the specific CGI used for dumping ZTP logs.

 https://cve.radiocsirt.org/vuln/ghsa-wjqc-5477-jpgg GHSA-wjqc-5477-jpgg 2026-10-03T16:59:16.103162+00:00

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5.00 through 5.37, USG FLEX 50(W) series firmware versions 5.10 through 5.37, USG20(W)-VPN series firmware versions 5.10 through 5.37, and VPN series firmware versions 5.00 through 5.37, could allow an unauthenticated LAN-based attacker to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed to steal cookies when the user visits the specific CGI used for dumping ZTP logs.

 https://cve.radiocsirt.org/vuln/gsd-2023-35139 gsd-2023-35139 2026-10-03T16:59:16.103182+00:00 gsd-2023-35139 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3017 WID-SEC-W-2023-3017 — Zyxel Firewall: Mehrere Schwachstellen 2026-10-03T16:59:16.103194+00:00

Ein Angreifer kann mehrere Schwachstellen in Zyxel Firewalls ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.