https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 23:50:02 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-14660 cnvd-2026-14660 https://cve.radiocsirt.org/vuln/cnvd-2026-14660 https://cve.radiocsirt.org/vuln/euvd-2026-260609 EUVD-2026-260609 https://cve.radiocsirt.org/vuln/euvd-2026-260609 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11696 <p>A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.</p> <p>A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11696 https://cve.radiocsirt.org/vuln/ghsa-mhmp-wxqj-ph8c <p>A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.</p> <p>A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.</p> https://cve.radiocsirt.org/vuln/ghsa-mhmp-wxqj-ph8c https://cve.radiocsirt.org/vuln/icsa-25-317-06 <p>A local code execution security issue exists within Studio 5000 Simulation Interface via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot. A local server-side request forgery (SSRF) security issue exists within Studio 5000 Simulation Interface via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.</p> <p>A local code execution security issue exists within Studio 5000 Simulation Interface via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot. A local server-side request forgery (SSRF) security issue exists within Studio 5000 Simulation Interface via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.</p> https://cve.radiocsirt.org/vuln/icsa-25-317-06 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2538 <p>Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation Studio 5000 ausnutzen, um Dateien zu manipulieren, um Informationen offenzulegen, und potenziell um beliebigen Programmcode mit Administratorrechten auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation Studio 5000 ausnutzen, um Dateien zu manipulieren, um Informationen offenzulegen, und potenziell um beliebigen Programmcode mit Administratorrechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2538