<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 05 Oct 2026 22:06:58 +0000</lastBuildDate>
    <item>
      <title>bdu:2025-03631</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2025-03631</link>
      <description>bdu:2025-03631</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2025-03631</guid>
    </item>
    <item>
      <title>certfr-2025-avi-0190 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0190</link>
      <description>certfr-2025-avi-0190</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2025-avi-0190</guid>
    </item>
    <item>
      <title>EUVD-2026-221858</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-221858</link>
      <description>EUVD-2026-221858</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-221858</guid>
    </item>
    <item>
      <title>fkie_cve-2025-26660</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2025-26660</link>
      <description>&lt;p&gt;SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to potentially modify data. Confidentiality and Availability are not impacted.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to potentially modify data. Confidentiality and Availability are not impacted.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2025-26660</guid>
    </item>
    <item>
      <title>GHSA-6xr2-ww2p-m9pg</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-6xr2-ww2p-m9pg</link>
      <description>&lt;p&gt;SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to potentially modify data. Confidentiality and Availability are not impacted.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to potentially modify data. Confidentiality and Availability are not impacted.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-6xr2-ww2p-m9pg</guid>
    </item>
    <item>
      <title>WID-SEC-W-2025-0521 — SAP Patchday März 2025: Mehrere Schwachstellen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0521</link>
      <description>&lt;p&gt;Ein Angreifer kann diese Schwachstellen ausnutzen, um erhöhte Privilegien zu erlangen, beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein Angreifer kann diese Schwachstellen ausnutzen, um erhöhte Privilegien zu erlangen, beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0521</guid>
    </item>
  </channel>
</rss>
