https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T22:47:19.926021+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-27195 CVE-2023-27195 2026-10-16T22:47:19.927234+00:00

Affected: trimble tm4web

Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code was used to create an Administrator account, attackers are also able to register new Administrator accounts with full privileges.