https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:02:43 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10513 bdu:2025-10513 https://cve.radiocsirt.org/vuln/bdu:2025-10513 https://cve.radiocsirt.org/vuln/euvd-2026-248042 EUVD-2026-248042 https://cve.radiocsirt.org/vuln/euvd-2026-248042 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25271 <p>An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.</p> <p>An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-25271 https://cve.radiocsirt.org/vuln/ghsa-q8vp-977j-9pjv <p>An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.</p> <p>An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.</p> https://cve.radiocsirt.org/vuln/ghsa-q8vp-977j-9pjv https://cve.radiocsirt.org/vuln/vde-2025-019 <p>An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication. An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation. An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations. An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.</p> <p>An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication. An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation. An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations. An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.</p> https://cve.radiocsirt.org/vuln/vde-2025-019