https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:33:10.498339+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04313 bdu:2022-04313 2026-10-10T11:33:10.576565+00:00 bdu:2022-04313 https://cve.radiocsirt.org/vuln/certfr-2022-avi-546 certfr-2022-avi-546 — De multiples vulnérabilités ont été découvertes dans les produits Schneider. Certaines d'entre elles permettent à un at… 2026-10-10T11:33:10.576605+00:00 certfr-2022-avi-546 https://cve.radiocsirt.org/vuln/euvd-2026-213785 EUVD-2026-213785 2026-10-10T11:33:10.576625+00:00 EUVD-2026-213785 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32747 fkie_cve-2022-32747 2026-10-10T11:33:10.576637+00:00

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

 https://cve.radiocsirt.org/vuln/ghsa-75hv-856g-q3wx GHSA-75hv-856g-q3wx 2026-10-10T11:33:10.576668+00:00

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

 https://cve.radiocsirt.org/vuln/gsd-2022-32747 gsd-2022-32747 2026-10-10T11:33:10.576684+00:00 gsd-2022-32747 https://cve.radiocsirt.org/vuln/sevd-2022-165-08 SEVD-2022-165-08 — EcoStruxure™ Cybersecurity Admin Expert 2026-10-10T11:33:10.576694+00:00

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Cybersecurity Admin Expert product. The EcoStruxure™ Cybersecurity Admin Expert product (CAE) is a solution for managing cybersecurity in an electrical network’s operational technology (OT). Failure to apply the remediation provided below may risk man-in-the-middle and/or device spoofing attacks, which could result in the total compromise of devices configured by the CAE.