<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-15T23:00:01.568828+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2022-04758</id>
    <title>bdu:2022-04758</title>
    <updated>2026-10-15T23:00:01.657084+00:00</updated>
    <content>bdu:2022-04758</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2022-04758"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2022-08358</id>
    <title>cnvd-2022-08358</title>
    <updated>2026-10-15T23:00:01.657125+00:00</updated>
    <content>cnvd-2022-08358</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2022-08358"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-13728</id>
    <title>EUVD-2026-13728</title>
    <updated>2026-10-15T23:00:01.657140+00:00</updated>
    <content>EUVD-2026-13728</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-13728"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2022-23128</id>
    <title>fkie_cve-2022-23128</title>
    <updated>2026-10-15T23:00:01.657152+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97 and ICONICS MobileHMI versions 10.95.3 to 10.97 allows a remote unauthenticated attacker to bypass the authentication of MC Works64, GENESIS64, Hyper Historian, AnalytiX and MobileHMI, and gain unauthorized access to the products, by sending specially crafted WebSocket packets to FrameWorX server, one of the functions of the products.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2022-23128"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-63gj-7jw2-qccf</id>
    <title>GHSA-63gj-7jw2-qccf</title>
    <updated>2026-10-15T23:00:01.657185+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97 and ICONICS MobileHMI versions 10.95.3 to 10.97 allows a remote unauthenticated attacker to bypass the authentication of MC Works64, GENESIS64, Hyper Historian, AnalytiX and MobileHMI, and gain unauthorized access to the products, by sending specially crafted WebSocket packets to FrameWorX server, one of the functions of the products.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-63gj-7jw2-qccf"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2022-23128</id>
    <title>gsd-2022-23128</title>
    <updated>2026-10-15T23:00:01.657204+00:00</updated>
    <content>gsd-2022-23128</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2022-23128"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/icsa-22-020-01</id>
    <title>ICSA-22-020-01 — Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA (Update B)</title>
    <updated>2026-10-15T23:00:01.657214+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Information disclosure vulnerability due to Improper Neutralization of Input During Web Page Generation (CWE-79) caused by the lack of proper input verification exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and ICONICS Suite and Mitsubishi Electric MC Works64.  Authentication bypass vulnerability due to Incomplete List of Disallowed Inputs (CWE-184) exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and ICONICS Suite Mitsubishi Electric GENESIS64, ICONICS Suite, and MC Works64. Information disclosure vulnerability due to Plaintext Storage of a Password (CWE-256) exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and ICONICS Suite and Mitsubishi Electric GENESIS64, ICONICS Suite, and MC Works64.  Denial-of-Service (DoS) vulnerability due to Buffer Over-read (CWE-126) exists in database server of Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS, and GENESIS32 Suite and Mitsubishi Electric GENESIS64, ICONICS Suite, GENESIS32, and MC Works64.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/icsa-22-020-01"/>
  </entry>
</feed>
