https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T22:03:55.959042+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01735 bdu:2024-01735 2026-10-10T22:03:56.043093+00:00 bdu:2024-01735 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0119 certfr-2024-avi-0119 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Siemens</span>. Certaines d'entr… 2026-10-10T22:03:56.043133+00:00 certfr-2024-avi-0119 https://cve.radiocsirt.org/vuln/cnvd-2024-09310 cnvd-2024-09310 2026-10-10T22:03:56.043154+00:00 cnvd-2024-09310 https://cve.radiocsirt.org/vuln/euvd-2026-238729 EUVD-2026-238729 2026-10-10T22:03:56.043167+00:00 EUVD-2026-238729 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23813 fkie_cve-2024-23813 2026-10-10T22:03:56.043179+00:00

A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.

 https://cve.radiocsirt.org/vuln/ghsa-f8v6-h8xc-6v8q GHSA-f8v6-h8xc-6v8q 2026-10-10T22:03:56.043210+00:00

A vulnerability has been identified in Polarion ALM (All versions). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.

 https://cve.radiocsirt.org/vuln/gsd-2024-23813 gsd-2024-23813 2026-10-10T22:03:56.043240+00:00 gsd-2024-23813 https://cve.radiocsirt.org/vuln/icsa-24-046-14 ICSA-24-046-14 — Siemens Polarion ALM 2026-10-10T22:03:56.043250+00:00

The affected product is vulnerable due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to NT AUTHORITY\SYSTEM. The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.