https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:54:36.463971+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-7432 EUVD-2026-7432 2026-10-04T00:54:36.466867+00:00 EUVD-2026-7432 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5222 fkie_cve-2023-5222 2026-10-04T00:54:36.466906+00:00

A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240364. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-cm4f-g738-hp2g GHSA-cm4f-g738-hp2g 2026-10-04T00:54:36.466943+00:00

A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240364. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/gsd-2023-5222 gsd-2023-5222 2026-10-04T00:54:36.466962+00:00 gsd-2023-5222 https://cve.radiocsirt.org/vuln/icsa-24-254-01 ICSA-24-254-01 — Viessmann Climate Solutions SE Vitogate 300 2026-10-04T00:54:36.466973+00:00

In Viessmann Vitogate 300 versions 2.1.3.0 and prior there is a vulnerability that affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. In Viessmann Vitogate 300 versions 2.1.3.0 and prior there is a vulnerability in some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. In Viessman Vitogate 300 versions 2.1.3.0 and prior, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.