https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:50:27.723984+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261695 EUVD-2026-261695 2026-10-05T22:50:27.910037+00:00 EUVD-2026-261695 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34080 fkie_cve-2025-34080 2026-10-05T22:50:27.910137+00:00

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.

 https://cve.radiocsirt.org/vuln/ghsa-8249-348w-qmmh GHSA-8249-348w-qmmh 2026-10-05T22:50:27.910220+00:00

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.

 https://cve.radiocsirt.org/vuln/jvndb-2025-007754 jvndb-2025-007754 2026-10-05T22:50:27.910238+00:00

CONPROSYS HMI System (CHS) provided by Contec Co.,Ltd. contains multiple vulnerabilities listed below. * Reflected cross-site scripting (CWE-79) - CVE-2025-34080 * Insertion of sensitive information into debugging code (CWE-215) - CVE-2025-34081 Alex Williams of Converge Technology Solutions reported these vulnerabilities to Vulncheck Inc., and Vulncheck Inc. reported these vulnerabilities to the developer. Based on the coordination request made by the developer, JPCERT/CC coordinated with Vulncheck Inc. and the developer.