https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T00:43:16.117470+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-362711 EUVD-2026-362711 2026-10-28T00:43:16.119168+00:00 EUVD-2026-362711 https://cve.radiocsirt.org/vuln/fkie_cve-2025-70340 fkie_cve-2025-70340 2026-10-28T00:43:16.119201+00:00

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows unauthorized impersonation of system messages and modification of trusted system-owned data, resulting in vertical privilege escalation and potential integrity violations.

 https://cve.radiocsirt.org/vuln/ghsa-433r-pgvp-mq8p GHSA-433r-pgvp-mq8p 2026-10-28T00:43:16.119232+00:00

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows unauthorized impersonation of system messages and modification of trusted system-owned data, resulting in vertical privilege escalation and potential integrity violations.