https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T02:01:20.163914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-246302 EUVD-2026-246302 2026-10-13T02:01:20.166921+00:00 EUVD-2026-246302 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6428 fkie_cve-2012-6428 2026-10-13T02:01:20.166949+00:00

The Carlo Gavazzi EOS-Box

stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.

 https://cve.radiocsirt.org/vuln/ghsa-mp78-772x-4r85 GHSA-mp78-772x-4r85 2026-10-13T02:01:20.166986+00:00

Carlo Gavazzi EOS-Box with firmware before 1.0.0.1080_2.1.10 establishes multiple hardcoded accounts, which makes it easier for remote attackers to obtain administrative access by reading a password in a PHP script, a similar issue to CVE-2012-5862.

 https://cve.radiocsirt.org/vuln/gsd-2012-6428 gsd-2012-6428 2026-10-13T02:01:20.167007+00:00 gsd-2012-6428 https://cve.radiocsirt.org/vuln/icsa-12-354-02 ICSA-12-354-02 — Carlo Gavazzi EOS Box Multiple Vulnerabilities 2026-10-13T02:01:20.167018+00:00

Carlo Gavazzi EOS-Box with firmware before 1.0.0.1080_2.1.10 establishes multiple hardcoded accounts, which makes it easier for remote attackers to obtain administrative access by reading a password in a PHP script, a similar issue to CVE-2012-5862.