https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:12:43.737682+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-7517 EUVD-2026-7517 2026-10-04T06:12:43.741787+00:00 EUVD-2026-7517 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5702 fkie_cve-2023-5702 2026-10-04T06:12:43.741840+00:00

A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-243140. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-782x-9xpx-3gm4 GHSA-782x-9xpx-3gm4 2026-10-04T06:12:43.741889+00:00

A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-243140. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/gsd-2023-5702 gsd-2023-5702 2026-10-04T06:12:43.741916+00:00 gsd-2023-5702 https://cve.radiocsirt.org/vuln/icsa-24-254-01 ICSA-24-254-01 — Viessmann Climate Solutions SE Vitogate 300 2026-10-04T06:12:43.741934+00:00

In Viessmann Vitogate 300 versions 2.1.3.0 and prior there is a vulnerability that affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. In Viessmann Vitogate 300 versions 2.1.3.0 and prior there is a vulnerability in some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. In Viessman Vitogate 300 versions 2.1.3.0 and prior, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.