https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:56:17.478124+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-230532 EUVD-2026-230532 2026-10-08T21:56:17.481532+00:00 EUVD-2026-230532 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3187 fkie_cve-2022-3187 2026-10-08T21:56:17.481565+00:00

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of verification to read the state of outlets.

 https://cve.radiocsirt.org/vuln/ghsa-xpx7-7hf6-5722 GHSA-xpx7-7hf6-5722 2026-10-08T21:56:17.481598+00:00

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of verification to read the state of outlets.

 https://cve.radiocsirt.org/vuln/gsd-2022-3187 gsd-2022-3187 2026-10-08T21:56:17.481616+00:00 gsd-2022-3187 https://cve.radiocsirt.org/vuln/icsa-22-263-03 ICSA-22-263-03 — Dataprobe iBoot-PDU 2026-10-08T21:56:17.481628+00:00

A specific function does not sanitize the input provided by the user, which may expose the affected an OS command injection vulnerability. CVE-2022-3183 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The device�s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may allow a user to write a file to the webroot directory. CVE-2022-3184 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product exposes sensitive data concerning the device. CVE-2022-3185 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). The affected product allows an attacker to access the device�s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other device's information. CVE-2022-3186 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N). Certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of veri…