https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:56:09.662380+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-217480 EUVD-2026-217480 2026-10-03T11:56:09.693160+00:00 EUVD-2026-217480 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5410 fkie_cve-2024-5410 2026-10-03T11:56:09.693203+00:00

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

 https://cve.radiocsirt.org/vuln/icsa-25-044-15 ICSA-25-044-15 — ORing IAP-420 2026-10-03T11:56:09.693236+00:00

A stored cross-site scripting can be triggered by placing JavaScript code into the SSID input field of the web interface. An attacker could exploit this vulnerability by luring an authenticated user to visit a malicious website. The filename parameter of a configuration file upload is prone to a command injection vulnerability. This vulnerability can only be exploited if a user is authenticated to the web interface. An attacker could invoke commands and gain full control over the device.