https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:25:45.199332+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07806 bdu:2025-07806 2026-10-03T16:25:45.261722+00:00 bdu:2025-07806 https://cve.radiocsirt.org/vuln/euvd-2026-246261 EUVD-2026-246261 2026-10-03T16:25:45.261766+00:00 EUVD-2026-246261 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41656 fkie_cve-2025-41656 2026-10-03T16:25:45.261783+00:00

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default.

 https://cve.radiocsirt.org/vuln/ghsa-9j57-6x57-gpv5 GHSA-9j57-6x57-gpv5 2026-10-03T16:25:45.261815+00:00

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default.

 https://cve.radiocsirt.org/vuln/ppsa-2025-002 PPSA-2025-002 — Pilz: Missing Authentication in Node-RED integration 2026-10-03T16:25:45.261831+00:00

Authentication is not configured by default for the Node-RED server on the Pilz industrial PC IndustrialPI. An unauthenticated remote attacker has full access to the Node-RED server and can run arbitrary operating system commands on the underlying operating system with privileged rights.