https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:10:33.259059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261183 EUVD-2026-261183 2026-10-04T10:10:33.263621+00:00 EUVD-2026-261183 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34208 fkie_cve-2025-34208 2026-10-04T10:10:33.263654+00:00

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store user passwords using unsalted SHA-512 hashes with a fall-back to unsalted SHA-1. The hashing is performed via PHP's `hash()` function in multiple files (server_write_requests_users.php, update_database.php, legacy/Login.php, tests/Unit/Api/IdpControllerTest.php). No per-user salt is used and the fast hash algorithms are unsuitable for password storage. An attacker who obtains the password database can recover cleartext passwords via offline dictionary or rainbow table attacks. The vulnerable code also contains logic that migrates legacy SHA-1 hashes to SHA-512 on login, further exposing users still on the old hash. This vulnerability was partially resolved, but still present within the legacy authentication platform.

 https://cve.radiocsirt.org/vuln/ghsa-rjxr-9x88-j92q GHSA-rjxr-9x88-j92q 2026-10-04T10:10:33.263697+00:00

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store user passwords using unsalted SHA-512 hashes with a fall-back to unsalted SHA-1. The hashing is performed via PHP's `hash()` function in multiple files (server_write_requests_users.php, update_database.php, legacy/Login.php, tests/Unit/Api/IdpControllerTest.php). No per-user salt is used and the fast hash algorithms are unsuitable for password storage. An attacker who obtains the password database can recover cleartext passwords via offline dictionary or rainbow table attacks. The vulnerable code also contains logic that migrates legacy SHA-1 hashes to SHA-512 on login, further exposing users still on the old hash. This vulnerability was partially resolved, but still present within the legacy authentication platform.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2208 WID-SEC-W-2025-2208 — Vasion Print: Mehrere Schwachstellen 2026-10-04T10:10:33.263719+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um Passwörter offenzulegen und dadurch Administratorrechte zu erlangen.