https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:12:51.092014+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-259889 EUVD-2026-259889 2026-10-03T06:12:51.184625+00:00 EUVD-2026-259889 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46384 fkie_cve-2023-46384 2026-10-03T06:12:51.184668+00:00

LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.

 https://cve.radiocsirt.org/vuln/ghsa-9vjx-qhgp-wfvm GHSA-9vjx-qhgp-wfvm 2026-10-03T06:12:51.184703+00:00

LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.

 https://cve.radiocsirt.org/vuln/gsd-2023-46384 gsd-2023-46384 2026-10-03T06:12:51.184720+00:00 gsd-2023-46384 https://cve.radiocsirt.org/vuln/icsa-24-247-01 ICSA-24-247-01 — LOYTEC Electronics LINX Series 2026-10-03T06:12:51.184732+00:00

LOYTEC LINX-212 firmware 6.2.4, LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3 devices send password-change requests via cleartext HTTP. LOYTEC LINX-212 firmware 6.2.4, LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3 devices lack authentication for the preinstalled version of LWEB-802 via an lweb802_pre/ URI. An unauthenticated attacker can edit any project (or create a new project) and control its GUI. LOYTEC LINX-212 firmware 6.2.4, LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3 devices use cleartext HTTP for login. LOYTEC electronics GmbH LINX Configurator 7.4.10 uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the password and gain full control of LOYTEC device configuration. LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to insecure permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to log in. LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote attackers to steal the password and gain full control of LOYTEC device configuration. LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151 firmware 7.2.4 are vulnerable to insecure permissions via registry.xml file. This vulnerability allows remote attackers to disclose smtp client acc…