https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:28:26.790900+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-172 certfr-2018-avi-172 — De multiples vulnérabilités ont été découvertes dans SCADA les produits Schneider Electric. Elles permettent à un attaq… 2026-10-04T21:28:26.805062+00:00 certfr-2018-avi-172 https://cve.radiocsirt.org/vuln/euvd-2026-176116 EUVD-2026-176116 2026-10-04T21:28:26.805104+00:00 EUVD-2026-176116 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7776 fkie_cve-2018-7776 2026-10-04T21:28:26.805120+00:00

The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.

 https://cve.radiocsirt.org/vuln/ghsa-7mqj-7qpc-qgx8 GHSA-7mqj-7qpc-qgx8 2026-10-04T21:28:26.805149+00:00

The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.

 https://cve.radiocsirt.org/vuln/gsd-2018-7776 gsd-2018-7776 2026-10-04T21:28:26.805165+00:00 gsd-2018-7776 https://cve.radiocsirt.org/vuln/icsa-17-180-02 ICSA-17-180-02 — Schneider Electric U.motion Builder (Update A) 2026-10-04T21:28:26.805177+00:00

Unauthenticated users can use calls to various paths in order to perform arbitrary SQL statements against the underlying database.CVE-2017-7973 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vulnerability exists within processing of track_import_export.php. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.CVE-2018-7765 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerability exists within processing of track_getdata.php. The underlying SQLite database query is subject to SQL injection on the id input parameter.CVE-2018-7766 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L). The vulnerability exists within processing of editobject.php. The underlying SQLite database query is subject to SQL injection on the type input parameter.CVE-2018-7767 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L). The vulnerability exists within processing of loadtemplate.php. The underlying SQLite database query is subject to SQL injection on the tpl input parameter.CVE-2018-7768 has been assigned to this vulnerability. A CVSS v3…

 https://cve.radiocsirt.org/vuln/sevd-2018-095-01 SEVD-2018-095-01 — Security Notification - U.motion Builder software 2026-10-04T21:28:26.805243+00:00

Schneider Electric is aware of an exploit that targets Schneider Electric’s U.motion Builder software. It is imperative customers cease using U.motion Builder software and remove it from their systems immediately.