https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:31:28.582565+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-369793 EUVD-2026-369793 2026-10-08T06:31:28.590552+00:00 EUVD-2026-369793 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90848 fkie_cve-2026-90848 2026-10-08T06:31:28.590591+00:00

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.

 https://cve.radiocsirt.org/vuln/ghsa-492q-f4p6-w72v GHSA-492q-f4p6-w72v 2026-10-08T06:31:28.590626+00:00

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90848 UBUNTU-CVE-2026-90848 2026-10-08T06:31:28.590644+00:00

Affected: Ubuntu:20.04:LTS: ausweisapp2, Ubuntu:22.04:LTS: ausweisapp2, Ubuntu:24.04:LTS: ausweisapp2, Ubuntu:26.04:LTS: ausweisapp2

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3356 WID-SEC-W-2026-3356 — Governikus AusweisApp2: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-08T06:31:28.590671+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Governikus AusweisApp2 ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.