https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:29:19.039167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-340675 EUVD-2026-340675 2026-10-06T21:29:19.087180+00:00 EUVD-2026-340675 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12504 fkie_cve-2026-12504 2026-10-06T21:29:19.087236+00:00

Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a local attacker to authenticate as a uid=0 account without a password and obtain a root shell via an `/etc/passwd` entry with an empty password field.

 https://cve.radiocsirt.org/vuln/ghsa-6gf2-c64f-3g3h GHSA-6gf2-c64f-3g3h 2026-10-06T21:29:19.087287+00:00

Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a local attacker to authenticate as a uid=0 account without a password and obtain a root shell via an `/etc/passwd` entry with an empty password field.