https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:50:30.516277+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-371487 EUVD-2026-371487 2026-10-07T00:50:30.564378+00:00 EUVD-2026-371487 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73177 fkie_cve-2026-73177 2026-10-07T00:50:30.564413+00:00

Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without performing any cryptographic signature or certificate verification. An authenticated administrator-level attacker can install arbitrary modified firmware on the device, enabling full persistent compromise of the platform.

 https://cve.radiocsirt.org/vuln/ghsa-pxh8-mw2j-c73g GHSA-pxh8-mw2j-c73g 2026-10-07T00:50:30.564445+00:00

Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without performing any cryptographic signature or certificate verification. An authenticated administrator-level attacker can install arbitrary modified firmware on the device, enabling full persistent compromise of the platform.