https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T13:21:37.772023+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-87945 cnvd-2022-87945 2026-10-15T13:21:37.835912+00:00 cnvd-2022-87945 https://cve.radiocsirt.org/vuln/euvd-2026-239344 EUVD-2026-239344 2026-10-15T13:21:37.835949+00:00 EUVD-2026-239344 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3158 fkie_cve-2022-3158 2026-10-15T13:21:37.835977+00:00

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully exploited, this could allow a user with basic user privileges to perform remote code execution on the server.

 https://cve.radiocsirt.org/vuln/ghsa-x5mm-8w3w-rp76 GHSA-x5mm-8w3w-rp76 2026-10-15T13:21:37.836007+00:00

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully exploited, this could allow a user with basic user privileges to perform remote code execution on the server.

 https://cve.radiocsirt.org/vuln/gsd-2022-3158 gsd-2022-3158 2026-10-15T13:21:37.836024+00:00 gsd-2022-3158 https://cve.radiocsirt.org/vuln/icsa-22-279-01 ICSA-22-279-01 — Rockwell Automation FactoryTalk VantagePoint 2026-10-15T13:21:37.836035+00:00

The affected product has improper access controls. The FactoryTalk VantagePoint SQLServer account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database.CVE-2022-38743 has been assigned to this vulnerability. A CVSS v3 base score of 9.9 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). The affected product lacks input validation when users enter SQL statements to retrieve information from the back-end database. This vulnerability could potentially allow a user with basic user privileges to perform remote code execution on the server.CVE-2022-3158 has been assigned to this vulnerability. A CVSS v3 base score of 9.9 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).