https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T23:04:03.567359+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02688 bdu:2022-02688 2026-10-09T23:04:03.572468+00:00 bdu:2022-02688 https://cve.radiocsirt.org/vuln/euvd-2026-230978 EUVD-2026-230978 2026-10-09T23:04:03.572501+00:00 EUVD-2026-230978 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43930 fkie_cve-2021-43930 2026-10-09T23:04:03.572516+00:00

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system.

 https://cve.radiocsirt.org/vuln/ghsa-7m74-2hrj-26ww GHSA-7m74-2hrj-26ww 2026-10-09T23:04:03.572544+00:00

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system.

 https://cve.radiocsirt.org/vuln/gsd-2021-43930 gsd-2021-43930 2026-10-09T23:04:03.572560+00:00 gsd-2021-43930 https://cve.radiocsirt.org/vuln/icsa-22-109-04 ICSA-22-109-04 — Elcomplus SmartPTT SCADA 2026-10-09T23:04:03.572572+00:00

An attacker can inject JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page.CVE-2021-43932 has been assigned to this vulnerability. A CVSS v3 base score of 9.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H). A low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints.CVE-2021-43939 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). The backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files.CVE-2021-43934 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system.CVE-2021-43930 has been assigned to this vulnerability. A CVSS v3 base score of 4.9 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).