https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:06:39.943179+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-243621 EUVD-2026-243621 2026-10-02T09:06:39.947042+00:00 EUVD-2026-243621 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41657 fkie_cve-2025-41657 2026-10-02T09:06:39.947082+00:00

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.

 https://cve.radiocsirt.org/vuln/ghsa-w6h2-p5q3-p762 GHSA-w6h2-p5q3-p762 2026-10-02T09:06:39.947160+00:00

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.

 https://cve.radiocsirt.org/vuln/vde-2025-047 VDE-2025-047 — AUMA: Incorrect delivery status of the Bluetooth configuration 2026-10-02T09:06:39.947190+00:00

For actuators with AC.2 controls and PROFOX actuators, a wrong configuration occurred for deliveries within the period from 01.01.2024 to 09.05.2025. Despite the ordered option "L90.00 = Bluetooth always deactivated", these actuators were delivered with an activated Bluetooth module which would allow an attacker to utilize the Bluetooth interface. It is possible to deactivate the Bluetooth interface of the affected actuators after the delivery using the standard procedures listed in the manuals.