https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T23:52:37.823816+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-14659 cnvd-2026-14659 2026-10-18T23:52:37.872889+00:00 cnvd-2026-14659 https://cve.radiocsirt.org/vuln/euvd-2026-260608 EUVD-2026-260608 2026-10-18T23:52:37.872924+00:00 EUVD-2026-260608 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11697 fkie_cve-2025-11697 2026-10-18T23:52:37.872939+00:00

A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot.

 https://cve.radiocsirt.org/vuln/ghsa-j5j6-gp3m-h3vx GHSA-j5j6-gp3m-h3vx 2026-10-18T23:52:37.872969+00:00

A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot.

 https://cve.radiocsirt.org/vuln/icsa-25-317-06 ICSA-25-317-06 — Rockwell Automation Studio 5000 Simulation Interface 2026-10-18T23:52:37.872986+00:00

A local code execution security issue exists within Studio 5000 Simulation Interface via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot. A local server-side request forgery (SSRF) security issue exists within Studio 5000 Simulation Interface via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2538 WID-SEC-W-2025-2538 — Rockwell Automation Studio 5000: Mehrere Schwachstellen 2026-10-18T23:52:37.873008+00:00

Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation Studio 5000 ausnutzen, um Dateien zu manipulieren, um Informationen offenzulegen, und potenziell um beliebigen Programmcode mit Administratorrechten auszuführen.