https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T02:21:34.084348+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-11243 cnvd-2016-11243 2026-10-17T02:21:34.088057+00:00 cnvd-2016-11243 https://cve.radiocsirt.org/vuln/euvd-2026-87134 EUVD-2026-87134 2026-10-17T02:21:34.088089+00:00 EUVD-2026-87134 https://cve.radiocsirt.org/vuln/fkie_cve-2016-8369 fkie_cve-2016-8369 2026-10-17T02:21:34.088103+00:00

An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request (CROSS-SITE REQUEST FORGERY).

 https://cve.radiocsirt.org/vuln/ghsa-r2m2-v3hx-rjmg GHSA-r2m2-v3hx-rjmg 2026-10-17T02:21:34.088130+00:00

An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request (CROSS-SITE REQUEST FORGERY).

 https://cve.radiocsirt.org/vuln/gsd-2016-8369 gsd-2016-8369 2026-10-17T02:21:34.088146+00:00 gsd-2016-8369 https://cve.radiocsirt.org/vuln/icsa-16-320-01 ICSA-16-320-01 — Lynxspring JENEsys BAS Bridge Vulnerabilities 2026-10-17T02:21:34.088157+00:00

An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands. This would allow an attacker with read-only access to make changes within the application. An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application uses a hard-coded username with no password allowing an attacker into the system without authentication. An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application's database lacks sufficient safeguards for protecting credentials. An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request (CROSS-SITE REQUEST FORGERY).