https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 14:38:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-02588 cnvd-2025-02588 https://cve.radiocsirt.org/vuln/cnvd-2025-02588 https://cve.radiocsirt.org/vuln/euvd-2026-18286 EUVD-2026-18286 https://cve.radiocsirt.org/vuln/euvd-2026-18286 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35870 <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within com.inductiveautomation.metro.impl. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17265.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within com.inductiveautomation.metro.impl. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17265.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-35870 https://cve.radiocsirt.org/vuln/ghsa-9rc3-8phx-mfxx <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within com.inductiveautomation.metro.impl. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17265.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within com.inductiveautomation.metro.impl. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17265.</p> https://cve.radiocsirt.org/vuln/ghsa-9rc3-8phx-mfxx https://cve.radiocsirt.org/vuln/gsd-2022-35870 gsd-2022-35870 https://cve.radiocsirt.org/vuln/gsd-2022-35870