https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T06:43:53.229255+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-212252 EUVD-2026-212252 2026-10-19T06:43:53.232014+00:00 EUVD-2026-212252 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0659 fkie_cve-2025-0659 2026-10-19T06:43:53.232044+00:00

A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A threat actor with admin privileges could leverage this vulnerability to overwrite reports including user projects.

 https://cve.radiocsirt.org/vuln/ghsa-mhm6-2hxr-6fv7 GHSA-mhm6-2hxr-6fv7 2026-10-19T06:43:53.232074+00:00

A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A threat actor with admin privileges could leverage this vulnerability to overwrite reports including user projects.

 https://cve.radiocsirt.org/vuln/icsa-25-028-05 ICSA-25-028-05 — Rockwell Automation DataMosaix Private Cloud 2026-10-19T06:43:53.232091+00:00

A path traversal vulnerability exists in DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A threat actor with admin privileges could leverage this vulnerability to overwrite reports including user projects. DataMosaix Private Cloud utilizes SQLite, which contains a use after free vulnerability in the ALTER TABLE implementation, which was demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.