https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T17:50:42.609985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-13989 bdu:2025-13989 2026-10-16T17:50:42.613302+00:00 bdu:2025-13989 https://cve.radiocsirt.org/vuln/cnvd-2025-30964 cnvd-2025-30964 2026-10-16T17:50:42.613334+00:00 cnvd-2025-30964 https://cve.radiocsirt.org/vuln/euvd-2026-261097 EUVD-2026-261097 2026-10-16T17:50:42.613348+00:00 EUVD-2026-261097 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34240 fkie_cve-2025-34240 2026-10-16T17:50:42.613360+00:00

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AppManagementController.appUpgradeAction() that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information.

 https://cve.radiocsirt.org/vuln/ghsa-h6f4-2rv9-p9w8 GHSA-h6f4-2rv9-p9w8 2026-10-16T17:50:42.613386+00:00

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AppManagementController.appUpgradeAction() that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information.