https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:04:06.869344+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-04629 bdu:2025-04629 2026-10-06T06:04:06.874291+00:00 bdu:2025-04629 https://cve.radiocsirt.org/vuln/cnvd-2025-07811 cnvd-2025-07811 2026-10-06T06:04:06.874337+00:00 cnvd-2025-07811 https://cve.radiocsirt.org/vuln/euvd-2026-227588 EUVD-2026-227588 2026-10-06T06:04:06.874360+00:00 EUVD-2026-227588 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41793 fkie_cve-2024-41793 2026-10-06T06:04:06.874375+00:00

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.

 https://cve.radiocsirt.org/vuln/ghsa-6f6r-xp9p-x965 GHSA-6f6r-xp9p-x965 2026-10-06T06:04:06.874409+00:00

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.

 https://cve.radiocsirt.org/vuln/icsa-25-100-06 ICSA-25-100-06 — Siemens SENTRON 7KT PAC1260 Data Manager 2026-10-06T06:04:06.874426+00:00

The web interface of affected devices does not sanitize the input parameters in specific GET requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. The web interface of affected devices does not sanitize the region parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the date and time. The web interface of affected devices contains a path traversal vulnerability. This could allow an unauthenticated attacker it to access arbitrary files on the device with root privileges. The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh. Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if t…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0772 WID-SEC-W-2025-0772 — Siemens SENTRON 7KT PAC1260 Data Manager: Mehrere Schwachstellen 2026-10-06T06:04:06.874463+00:00

Ein Angreifer kann mehrere Schwachstellen in Siemens Sentron PAC ausnutzen, um beliebigen Code mit administrativen Rechten auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, erhöhte Rechte zu erlangen und vertrauliche Informationen preiszugeben.