https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:27:05.720813+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-276428 EUVD-2026-276428 2026-10-05T01:27:05.786567+00:00 EUVD-2026-276428 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22321 fkie_cve-2026-22321 2026-10-05T01:27:05.786608+00:00

A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input. An overflow condition crashes the thread handling the login attempt, forcing the session to close. Because other CLI sessions remain unaffected, the impact is limited to a low‑severity availability disruption.

 https://cve.radiocsirt.org/vuln/ghsa-j66g-mfcw-hrf3 GHSA-j66g-mfcw-hrf3 2026-10-05T01:27:05.786644+00:00

A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input. An overflow condition crashes the thread handling the login attempt, forcing the session to close. Because other CLI sessions remain unaffected, the impact is limited to a low‑severity availability disruption.

 https://cve.radiocsirt.org/vuln/vde-2025-104 VDE-2025-104 — Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx, FL SWITCH TSN 23xx and FL SWITCH 59xx Firmware 2026-10-05T01:27:05.786664+00:00

Multiple vulnerabilities have been identified in the FL SWITCH 2xxx, FL SWITCH TSN 23xx and FL SWITCH 59xx firmware prior to version 3.53. One of these (CVE-2026-22317) enables an attacker to execute system commands as root user on the device. Five other vulnerabilities (CVE-2026-22316, CVE-2026-22318, CVE-2026-22319, CVE-2026-22320 and CVE-2026-22321) are related to Denial of Service (DoS) attacks, which partly limit the device's functionality. Another vulnerability (CVE-2026-22322) relates to reflected cross-site scripting in the web-based management of the device. And one vulnerability (CVE-2026-22323) relates to Cross‑Site Request Forgery in the web-based management of the device. All vulnerabilities have been resolved in firmware version 3.53.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0765 WID-SEC-W-2026-0765 — Phoenix Contact FL SWITCH: Mehrere Schwachstellen 2026-10-05T01:27:05.786692+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Phoenix Contact FL SWITCH ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, einen Denial-of-Service-Zustand zu verursachen, Cross-Site-Scripting-Angriffe durchzuführen oder Daten zu manipulieren.