https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T06:41:38.624546+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06524 bdu:2025-06524 2026-10-20T06:41:38.643343+00:00 bdu:2025-06524 https://cve.radiocsirt.org/vuln/cnvd-2025-10580 cnvd-2025-10580 2026-10-20T06:41:38.643381+00:00 cnvd-2025-10580 https://cve.radiocsirt.org/vuln/euvd-2026-239139 EUVD-2026-239139 2026-10-20T06:41:38.643396+00:00 EUVD-2026-239139 https://cve.radiocsirt.org/vuln/fkie_cve-2025-26390 fkie_cve-2025-26390 2026-10-20T06:41:38.643409+00:00

A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.

 https://cve.radiocsirt.org/vuln/ghsa-cx4x-4wcx-cq8q GHSA-cx4x-4wcx-cq8q 2026-10-20T06:41:38.643440+00:00

A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.

 https://cve.radiocsirt.org/vuln/icsa-25-135-10 ICSA-25-135-10 — Siemens OZW Web Servers 2026-10-20T06:41:38.643456+00:00

The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.