https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T01:53:23.444124+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-216 certfr-2022-avi-216 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-25T01:53:23.535939+00:00 certfr-2022-avi-216 https://cve.radiocsirt.org/vuln/cnvd-2022-17787 cnvd-2022-17787 2026-10-25T01:53:23.536002+00:00 cnvd-2022-17787 https://cve.radiocsirt.org/vuln/euvd-2026-31747 EUVD-2026-31747 2026-10-25T01:53:23.536036+00:00 EUVD-2026-31747 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41543 fkie_cve-2021-41543 2026-10-25T01:53:23.536059+00:00

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.

 https://cve.radiocsirt.org/vuln/ghsa-wx2h-56xm-3293 GHSA-wx2h-56xm-3293 2026-10-25T01:53:23.536105+00:00

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.

 https://cve.radiocsirt.org/vuln/gsd-2021-41543 gsd-2021-41543 2026-10-25T01:53:23.536137+00:00 gsd-2021-41543 https://cve.radiocsirt.org/vuln/icsa-22-069-07 ICSA-22-069-07 — Siemens Climatix POL909 2026-10-25T01:53:23.536156+00:00

The Group Management page of affected devices is vulnerable to cross-site scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action. The User Management page of affected devices is vulnerable to cross-site scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action. The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.