https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:17:45.513176+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254391 EUVD-2026-254391 2026-10-03T02:17:45.567529+00:00 EUVD-2026-254391 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3448 fkie_cve-2025-3448 2026-10-03T02:17:45.567565+00:00

Reflected cross-site scripting (XSS) vulnerabilities exist in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session

 https://cve.radiocsirt.org/vuln/ghsa-w6pp-7rxr-7pg5 GHSA-w6pp-7rxr-7pg5 2026-10-03T02:17:45.567601+00:00

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in B&R Industrial Automation Automation Runtime.This issue affects Automation Runtime: from 6.0 before 6.4.

 https://cve.radiocsirt.org/vuln/icsa-26-141-04 ICSA-26-141-04 — ABB B&R Automation Runtime 2026-10-03T02:17:45.567621+00:00

An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory.

An attacker who successfully exploited these vulnerabilities could take over a remote session or execute code in the context of the user’s browser session.

 https://cve.radiocsirt.org/vuln/sa25p003 SA25P003 — B&R Automation Runtime Vulnerabilities in System Diagnostic Manager (SDM) 2026-10-03T02:17:45.567644+00:00

An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory.

An attacker who successfully exploited these vulnerabilities could take over a remote session or execute code in the context of the user’s browser session.