Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:47:01 +0000 bdu:2025-10412 https://cve.radiocsirt.org/vuln/bdu:2025-10412 bdu:2025-10412 https://cve.radiocsirt.org/vuln/bdu:2025-10412 EUVD-2026-246677 https://cve.radiocsirt.org/vuln/euvd-2026-246677 EUVD-2026-246677 https://cve.radiocsirt.org/vuln/euvd-2026-246677 fkie_cve-2025-41668 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41668 <p>A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device.</p> <p>A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-41668 GHSA-cfp6-pp5w-4v4g https://cve.radiocsirt.org/vuln/ghsa-cfp6-pp5w-4v4g <p>A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device.</p> <p>A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device.</p> https://cve.radiocsirt.org/vuln/ghsa-cfp6-pp5w-4v4g VDE-2025-054 — Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware https://cve.radiocsirt.org/vuln/vde-2025-054 <p>Multiple vulnerabilities in the PLCnext system allowed low-privileged remote attackers to gain unauthorized access or trigger system reboots by manipulating configuration files and symbolic links. Affected services include watchdog, arp-preinit, and security-profile, potentially exposing critical system files. These issues have been resolved in firmware version 2025.0.2.</p> <p>Multiple vulnerabilities in the PLCnext system allowed low-privileged remote attackers to gain unauthorized access or trigger system reboots by manipulating configuration files and symbolic links. Affected services include watchdog, arp-preinit, and security-profile, potentially exposing critical system files. These issues have been resolved in firmware version 2025.0.2.</p> https://cve.radiocsirt.org/vuln/vde-2025-054