https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T02:44:18.311938+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-210866 EUVD-2026-210866 2026-10-20T02:44:18.321539+00:00 EUVD-2026-210866 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4212 fkie_cve-2023-4212 2026-10-20T02:44:18.321580+00:00

​A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires physical access to the device via a USB stick.

 https://cve.radiocsirt.org/vuln/ghsa-866w-mhv5-886h GHSA-866w-mhv5-886h 2026-10-20T02:44:18.321626+00:00

?A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires physical access to the device via a USB stick.

 https://cve.radiocsirt.org/vuln/gsd-2023-4212 gsd-2023-4212 2026-10-20T02:44:18.321656+00:00 gsd-2023-4212 https://cve.radiocsirt.org/vuln/icsa-23-234-02 ICSA-23-234-02 — Trane Thermostats 2026-10-20T02:44:18.321675+00:00

A command injection vulnerability exists in Trane Technologies XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires physical access to the device via a USB stick.