https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:30:34.047915+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-276439 EUVD-2026-276439 2026-10-04T06:30:34.123343+00:00 EUVD-2026-276439 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22317 fkie_cve-2026-22317 2026-10-04T06:30:34.123382+00:00

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.

 https://cve.radiocsirt.org/vuln/ghsa-mfmx-5m88-3hp5 GHSA-mfmx-5m88-3hp5 2026-10-04T06:30:34.123428+00:00

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.

 https://cve.radiocsirt.org/vuln/vde-2025-104 VDE-2025-104 — Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx, FL SWITCH TSN 23xx and FL SWITCH 59xx Firmware 2026-10-04T06:30:34.123449+00:00

Multiple vulnerabilities have been identified in the FL SWITCH 2xxx, FL SWITCH TSN 23xx and FL SWITCH 59xx firmware prior to version 3.53. One of these (CVE-2026-22317) enables an attacker to execute system commands as root user on the device. Five other vulnerabilities (CVE-2026-22316, CVE-2026-22318, CVE-2026-22319, CVE-2026-22320 and CVE-2026-22321) are related to Denial of Service (DoS) attacks, which partly limit the device's functionality. Another vulnerability (CVE-2026-22322) relates to reflected cross-site scripting in the web-based management of the device. And one vulnerability (CVE-2026-22323) relates to Cross‑Site Request Forgery in the web-based management of the device. All vulnerabilities have been resolved in firmware version 3.53.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0765 WID-SEC-W-2026-0765 — Phoenix Contact FL SWITCH: Mehrere Schwachstellen 2026-10-04T06:30:34.123485+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Phoenix Contact FL SWITCH ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, einen Denial-of-Service-Zustand zu verursachen, Cross-Site-Scripting-Angriffe durchzuführen oder Daten zu manipulieren.