<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T21:46:38.062401+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2026-14154</id>
    <title>bdu:2026-14154</title>
    <updated>2026-10-03T21:46:38.138404+00:00</updated>
    <content>bdu:2026-14154</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2026-14154"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-366680</id>
    <title>EUVD-2026-366680</title>
    <updated>2026-10-03T21:46:38.138438+00:00</updated>
    <content>EUVD-2026-366680</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-366680"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2026-86060</id>
    <title>fkie_cve-2026-86060</title>
    <updated>2026-10-03T21:46:38.138452+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>RouterOS contains an argument-handling flaw in the SSH login
path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS login helper.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2026-86060"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-6425-cjxv-52gp</id>
    <title>GHSA-6425-cjxv-52gp</title>
    <updated>2026-10-03T21:46:38.138483+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>RouterOS contains an argument-handling flaw in the SSH login
path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS login helper.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-6425-cjxv-52gp"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ncsc-2026-0345</id>
    <title>NCSC-2026-0345 — Kwetsbaarheden verholpen in MikroTik RouterOS</title>
    <updated>2026-10-03T21:46:38.138500+00:00</updated>
    <content>NCSC-2026-0345</content>
    <link href="https://cve.radiocsirt.org/vuln/ncsc-2026-0345"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3193</id>
    <title>WID-SEC-W-2026-3193 — MikroTik RouterOS: Mehrere Schwachstellen</title>
    <updated>2026-10-03T21:46:38.138520+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MikroTik RouterOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Denial of Service Zustand herbeizuführen und um die Kontrolle über betroffene Geräte zu übernehmen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3193"/>
  </entry>
</feed>
