https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:37:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-250431 EUVD-2026-250431 https://cve.radiocsirt.org/vuln/euvd-2026-250431 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41451 <p>Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (&#39;Command Injection&#39;) in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.</p> <p>Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (&#39;Command Injection&#39;) in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-41451 https://cve.radiocsirt.org/vuln/ghsa-r7mx-84m9-9h4q <p>Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (&#39;Command Injection&#39;) in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.</p> <p>Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (&#39;Command Injection&#39;) in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.</p> https://cve.radiocsirt.org/vuln/ghsa-r7mx-84m9-9h4q https://cve.radiocsirt.org/vuln/icsa-25-140-03 <p>An unauthorized access vulnerability, caused by datetime-based password generation, could potentially result in an authenticaion bypass in Danfoss AK-SM8xxA Series, prior to version R4.2. Improper neutralization of alarm-to-mail configuration fields used in an OS shell command injection in Danfoss AK-SM8xxA Series, prior to version 4.3.1, may lead to post-authenticated remote code execution on an attacked system. A post-authenticated external control of system web interface configuration setting vulnerability exists in the Danfoss AK-SM8xxA Series prior to version 4.3.1, which could allow for a denial-of-service attack induced by improper handling of exceptional conditions.</p> <p>An unauthorized access vulnerability, caused by datetime-based password generation, could potentially result in an authenticaion bypass in Danfoss AK-SM8xxA Series, prior to version R4.2. Improper neutralization of alarm-to-mail configuration fields used in an OS shell command injection in Danfoss AK-SM8xxA Series, prior to version 4.3.1, may lead to post-authenticated remote code execution on an attacked system. A post-authenticated external control of system web interface configuration setting vulnerability exists in the Danfoss AK-SM8xxA Series prior to version 4.3.1, which could allow for a denial-of-service attack induced by improper handling of exceptional conditions.</p> https://cve.radiocsirt.org/vuln/icsa-25-140-03