https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:31:47.479124+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02566 bdu:2025-02566 2026-10-04T09:31:47.485640+00:00 bdu:2025-02566 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0216 certfr-2025-avi-0216 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-04T09:31:47.485674+00:00 certfr-2025-avi-0216 https://cve.radiocsirt.org/vuln/cnvd-2025-12361 cnvd-2025-12361 2026-10-04T09:31:47.485693+00:00 cnvd-2025-12361 https://cve.radiocsirt.org/vuln/euvd-2026-222205 EUVD-2026-222205 2026-10-04T09:31:47.485706+00:00 EUVD-2026-222205 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0813 fkie_cve-2025-0813 2026-10-04T09:31:47.485716+00:00

CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process.

 https://cve.radiocsirt.org/vuln/ghsa-9w79-7j73-f648 GHSA-9w79-7j73-f648 2026-10-04T09:31:47.485743+00:00

CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process.

 https://cve.radiocsirt.org/vuln/icsa-25-077-01 ICSA-25-077-01 — Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI) 2026-10-04T09:31:47.485758+00:00

The Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI) is vulnerable to authentication bypass. This occurs when an unauthorized user, without permission rights, has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process.

 https://cve.radiocsirt.org/vuln/sevd-2025-070-02 SEVD-2025-070-02 — EPAS-UI & EcoSUI 2026-10-04T09:31:47.485775+00:00

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Automation System User Interface (EPAS-UI) product.

The EcoStruxure Power Automation System User Interface (EPAS-UI) https://www.se.com/ng/en/product-range/61456-ecostruxure-power-automation-system-user-interface/#overview product is an HMI SCADA designed for electrical networks and substations operations.

Failure to apply the fix provided below may risk an Authentication Bypass attack, which could result in an attacker taking partial to full control of EPAS-UI.