https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T06:02:01.004806+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-12055 CVE-2025-12055 — Unauthenticated Local File Disclosure in MPDV Mikrolab MIP 2 / FEDRA 2 / HYDRA X Manufacturing Execution System 2026-10-22T06:02:01.006145+00:00

Affected: MPDV Mikrolab GmbH MIP 2, MPDV Mikrolab GmbH FEDRA 2, MPDV Mikrolab GmbH HYDRA X

HYDRA X, MIP 2 and FEDRA 2 of MPDV Mikrolab GmbH suffer from an unauthenticated local file disclosure vulnerability in all releases until Maintenance Pack 36 with Servicepack 8 (week 36/2025), which allows an attacker to read arbitrary files from the Windows operating system. The "Filename" parameter of the public $SCHEMAS$ ressource is vulnerable and can be exploited easily.