https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:45:42.316353+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325081 EUVD-2026-325081 2026-10-03T20:45:42.319371+00:00 EUVD-2026-325081 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21404 fkie_cve-2026-21404 2026-10-03T20:45:42.319403+00:00

NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a local attacker can extract credentials to bypass the intended transfer workflow. Successful authentication against the SOAP interface grants access to privileged WCF methods, enabling an attacker to write or overwrite files within application-defined paths.

 https://cve.radiocsirt.org/vuln/ghsa-x454-wfv6-72h8 GHSA-x454-wfv6-72h8 2026-10-03T20:45:42.319435+00:00

NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a local attacker can extract credentials to bypass the intended transfer workflow. Successful authentication against the SOAP interface grants access to privileged WCF methods, enabling an attacker to write or overwrite files within application-defined paths.

 https://cve.radiocsirt.org/vuln/icsa-26-155-01 ICSA-26-155-01 — NAVTOR NavBox 2026-10-03T20:45:42.319453+00:00

NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a local attacker can extract credentials to bypass the intended transfer workflow. Successful authentication against the SOAP interface grants access to privileged WCF methods, enabling an attacker to write or overwrite files within application-defined paths.