https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:42:10.926893+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-35484 cnvd-2020-35484 2026-10-12T23:42:11.014920+00:00 cnvd-2020-35484 https://cve.radiocsirt.org/vuln/euvd-2026-39954 EUVD-2026-39954 2026-10-12T23:42:11.014961+00:00 EUVD-2026-39954 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10633 fkie_cve-2020-10633 2026-10-12T23:42:11.014987+00:00

A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0). An attacker could send a specially crafted URL to initiate a password change for the device. The target must introduce the credentials to the gateway before the attack can be successful.

 https://cve.radiocsirt.org/vuln/ghsa-22gj-rr23-9xgc GHSA-22gj-rr23-9xgc 2026-10-12T23:42:11.015033+00:00

A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0). An attacker could send a specially crafted URL to initiate a password change for the device. The target must introduce the credentials to the gateway before the attack can be successful.

 https://cve.radiocsirt.org/vuln/gsd-2020-10633 gsd-2020-10633 2026-10-12T23:42:11.015067+00:00 gsd-2020-10633 https://cve.radiocsirt.org/vuln/icsa-20-098-03 ICSA-20-098-03 — HMS Networks eWON Flexy and Cosy 2026-10-12T23:42:11.015080+00:00

A non-persistent XSS (cross-site scripting) vulnerability exists. An attacker could send a specially crafted URL to initiate a password change for the device. The target must introduce the credentials to the gateway before the attack can be successful.CVE-2020-10633 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).