https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:44:22.166112+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10513 bdu:2025-10513 2026-10-03T01:44:22.249023+00:00 bdu:2025-10513 https://cve.radiocsirt.org/vuln/euvd-2026-248042 EUVD-2026-248042 2026-10-03T01:44:22.249062+00:00 EUVD-2026-248042 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25271 fkie_cve-2025-25271 2026-10-03T01:44:22.249076+00:00

An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.

 https://cve.radiocsirt.org/vuln/ghsa-q8vp-977j-9pjv GHSA-q8vp-977j-9pjv 2026-10-03T01:44:22.249107+00:00

An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.

 https://cve.radiocsirt.org/vuln/vde-2025-019 VDE-2025-019 — Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers 2026-10-03T01:44:22.249122+00:00

An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication. An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation. An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations. An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.