https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:07:59.000554+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-272922 EUVD-2026-272922 2026-10-03T13:07:59.070790+00:00 EUVD-2026-272922 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24338 fkie_cve-2025-24338 2026-10-03T13:07:59.070851+00:00

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side code in the context of another user's browser via multiple crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/ghsa-hh4g-95jr-4v9q GHSA-hh4g-95jr-4v9q 2026-10-03T13:07:59.070898+00:00

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side code in the context of another user's browser via multiple crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/vde-2025-040 VDE-2025-040 — WAGO: Vulnerabilities in ctrlX OS app 2026-10-03T13:07:59.070919+00:00

The base ctrlX OS apps Device Admin and Solutions contain multiple vulnerabilities. In a worst case scenario, a remote authenticated (low-privileged) attacker might be able to execute arbitrary OS commands running with higher privileges.