https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:01:25.225478+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-241291 EUVD-2026-241291 2026-10-02T22:01:25.231181+00:00 EUVD-2026-241291 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1985 fkie_cve-2025-1985 2026-10-02T22:01:25.231236+00:00

Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.

 https://cve.radiocsirt.org/vuln/ghsa-36jp-c3g9-9g26 GHSA-36jp-c3g9-9g26 2026-10-02T22:01:25.231270+00:00

Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.

 https://cve.radiocsirt.org/vuln/vde-2025-011 VDE-2025-011 — PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability and information disclosure 2026-10-02T22:01:25.231286+00:00

A stored cross-site scripting vulnerability has been discovered in the profinet gateway LB8122A.1.EL. An attacker can write an HTML tag with up to 32 characters in the message field of a HART transmitter. The HTML tag is interpreted as HTML when the HART information is displayed in a webbrowser. If the HTML tag contains a link to a manipulated page, a user can be tricked into accessing this page. Furthermore, an attacker can access information about running processes via the SNMP protocol. Sending such SNMP read commands can also trigger a reboot.