https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:39:53.318561+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-25264 CVE-2025-25264 — Overly Permissive CORS Policy in WAGO Device Manager 2026-10-02T10:39:53.320366+00:00

Affected: WAGO CC100 0751-9x01, WAGO PFC100 G1 0750-810x/xxxx-xxxx, WAGO PFC100 G2 0750-811x-xxxx-xxxx, WAGO PFC200 G1 750-820x-xxx-xxx, WAGO PFC200 G2 750-821x-xxx-xxx, WAGO TP600 0762-420x/8000-000x, WAGO TP600 0762-430x/8000-000x, WAGO TP600 0762-520x/8000-000x, WAGO TP600 0762-530x/8000-000x, WAGO TP600 0762-620x/8000-000x and 2 more

An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.