https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:10:07.209973+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-02000 bdu:2026-02000 2026-10-02T12:10:07.214608+00:00 bdu:2026-02000 https://cve.radiocsirt.org/vuln/euvd-2026-267886 EUVD-2026-267886 2026-10-02T12:10:07.214646+00:00 EUVD-2026-267886 https://cve.radiocsirt.org/vuln/fkie_cve-2025-40587 fkie_cve-2025-40587 2026-10-02T12:10:07.214661+00:00

A vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 (All versions < V2410.2). The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by creating specially crafted document titles that are later viewed by other users of the application.

 https://cve.radiocsirt.org/vuln/ghsa-8xhr-4hhh-87fr GHSA-8xhr-4hhh-87fr 2026-10-02T12:10:07.214692+00:00

A vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 (All versions < V2410.2). The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by creating specially crafted document titles that are later viewed by other users of the application.

 https://cve.radiocsirt.org/vuln/icsa-26-043-02 ICSA-26-043-02 — Siemens Polarion 2026-10-02T12:10:07.214710+00:00

The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by creating specially crafted document titles that are later viewed by other users of the application.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0051 NCSC-2026-0051 — Kwetsbaarheden verholpen in Siemens producten 2026-10-02T12:10:07.214728+00:00 NCSC-2026-0051 https://cve.radiocsirt.org/vuln/ssa-035571 SSA-035571 — SSA-035571: Cross Site Scripting Vulnerability in Polarion Before V2506 2026-10-02T12:10:07.214754+00:00

The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by creating specially crafted document titles that are later viewed by other users of the application.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0360 WID-SEC-W-2026-0360 — Siemens Polarion: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-02T12:10:07.214770+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Siemens Polarion ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.