<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-15T13:42:11.548382+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2025-02540</id>
    <title>bdu:2025-02540</title>
    <updated>2026-10-15T13:42:11.552120+00:00</updated>
    <content>bdu:2025-02540</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2025-02540"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-222578</id>
    <title>EUVD-2026-222578</title>
    <updated>2026-10-15T13:42:11.552154+00:00</updated>
    <content>EUVD-2026-222578</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-222578"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2025-1960</id>
    <title>fkie_cve-2025-1960</title>
    <updated>2026-10-15T13:42:11.552168+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could cause an
attacker to execute unauthorized commands when a system’s default password credentials have not been
changed on first use. The default username is not displayed correctly in the WebHMI interface.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2025-1960"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-5mrq-42cr-23mg</id>
    <title>GHSA-5mrq-42cr-23mg</title>
    <updated>2026-10-15T13:42:11.552197+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could cause an
attacker to execute unauthorized commands when a system’s default password credentials have not been
changed on first use. The default username is not displayed correctly in the WebHMI interface.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-5mrq-42cr-23mg"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/icsa-25-077-03</id>
    <title>ICSA-25-077-03 — Schneider Electric EcoStruxure Power Automation System</title>
    <updated>2026-10-15T13:42:11.552215+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Schneider Electric is aware of a vulnerability in its WebHMI component used in EcoStruxure Power  Automation System User Interface product and EcoStruxure Microgrid Operation Large (EMO-L) solution. EcoStruxure Power Automation System User Interface https://www.se.com/ng/en/product-range/61456-ecostruxure-power-automation-system-user-interface/#overview (formerly known as EcoSUI) is a local SCADA/HMI,  based on IEC 61850, that helps operators supervise, monitor, and control large and open electrical networks,  with embedded cybersecurity. Formerly EcoStruxure Substation Operation User Interface. EcoStruxure Microgrid Operation Large (EMO-L) https://www.se.com/ca/en/product-range/65897-ecostruxure-microgrid-operation/#overview  is a power management system dedicated to large and  critical Microgrid application. EMO-L is based on EcoStruxure Power Automation System solution (EPAS)  with dedicated HMI which allows the monitoring and control of the distributed energy resources systems within  the Microgrid. One HMI option for EMO-L is EcoSUI (WebHMI). Failure to apply the remediations provided below may risk unauthorized access to the underlying software  application running WebHMI.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/icsa-25-077-03"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/sevd-2025-070-03</id>
    <title>SEVD-2025-070-03 — WebHMI Component For EcoStruxure™ Power Automation System User Interface and EcoStruxure™ Microgrid Operation Large</title>
    <updated>2026-10-15T13:42:11.552240+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>Schneider Electric is aware of a vulnerability in its WebHMI component used in EcoStruxure™ Power 
Automation System User Interface product and EcoStruxure™ Microgrid Operation Large (EMO-L) solution.</p>
<p>EcoStruxure™ Power Automation System User Interface https://www.se.com/ng/en/product-range/61456-ecostruxure-power-automation-system-user-interface/#overview (formerly known as EcoSUI) is a local SCADA/HMI, 
based on IEC 61850, that helps operators supervise, monitor, and control large and open electrical networks, 
with embedded cybersecurity. Formerly EcoStruxure Substation Operation User Interface.</p>
<p>EcoStruxure™ Microgrid Operation Large (EMO-L) https://www.se.com/ca/en/product-range/65897-ecostruxure-microgrid-operation/#overview  is a power management system dedicated to large and 
critical Microgrid application. EMO-L is based on EcoStruxure™ Power Automation System solution (EPAS) 
with dedicated HMI which allows the monitoring and control of the distributed energy resources systems within 
the Microgrid. One HMI option for EMO-L is EcoSUI (WebHMI).</p>
<p>Failure to apply the remediations provided below may risk unauthorized access to the underlying software 
application running WebHMI.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/sevd-2025-070-03"/>
  </entry>
</feed>
