https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:00:39.158395+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-185940 EUVD-2026-185940 2026-10-03T14:00:39.161674+00:00 EUVD-2026-185940 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45852 fkie_cve-2023-45852 2026-10-03T14:00:39.161714+00:00

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.

 https://cve.radiocsirt.org/vuln/ghsa-4j4f-q993-cr2r GHSA-4j4f-q993-cr2r 2026-10-03T14:00:39.161744+00:00

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.

 https://cve.radiocsirt.org/vuln/gsd-2023-45852 gsd-2023-45852 2026-10-03T14:00:39.161760+00:00 gsd-2023-45852 https://cve.radiocsirt.org/vuln/icsa-24-254-01 ICSA-24-254-01 — Viessmann Climate Solutions SE Vitogate 300 2026-10-03T14:00:39.161772+00:00

In Viessmann Vitogate 300 versions 2.1.3.0 and prior there is a vulnerability that affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. In Viessmann Vitogate 300 versions 2.1.3.0 and prior there is a vulnerability in some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. In Viessman Vitogate 300 versions 2.1.3.0 and prior, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.