https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:46:36.064357+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262887 EUVD-2026-262887 2026-10-03T17:46:36.131322+00:00 EUVD-2026-262887 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41696 fkie_cve-2025-41696 2026-10-03T17:46:36.131359+00:00

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.

 https://cve.radiocsirt.org/vuln/ghsa-chp3-94cp-3c98 GHSA-chp3-94cp-3c98 2026-10-03T17:46:36.131392+00:00

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.

 https://cve.radiocsirt.org/vuln/vde-2025-071 VDE-2025-071 — Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx Firmware 2026-10-03T17:46:36.131410+00:00

Multiple vulnerabilities have been identified in the FL SWITCH 2xxx firmware prior to version 3.50. Two of these (CVE-2025-41692 and CVE-2025-41696) enable an attacker to access the device's file system. Two other vulnerabilities (CVE-2025-41693 and CVE-2025-41694) are related to Denial of Service (DoS) attacks, which partly limit the device's functionality. Another vulnerability (CVE-2025-41697) allows an unauthenticated physical attacker to access a login shell via an undocumented UART port. Furthermore, there are multiple vulnerabilities relating to reflected cross-site scripting in the web-based management of the device. All vulnerabilities have been resolved in firmware version 3.50.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2760 WID-SEC-W-2025-2760 — Phoenix Contact FL SWITCH: Mehrere Schwachstellen 2026-10-03T17:46:36.131446+00:00

Ein Angreifer kann mehrere Schwachstellen in Phoenix Contact FL SWITCH ausnutzen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.