https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:35:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01721 bdu:2026-01721 https://cve.radiocsirt.org/vuln/bdu:2026-01721 https://cve.radiocsirt.org/vuln/euvd-2026-267689 EUVD-2026-267689 https://cve.radiocsirt.org/vuln/euvd-2026-267689 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22906 <p>User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass.</p> <p>User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-22906 https://cve.radiocsirt.org/vuln/ghsa-q336-fj7p-g7vx <p>User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass.</p> <p>User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass.</p> https://cve.radiocsirt.org/vuln/ghsa-q336-fj7p-g7vx https://cve.radiocsirt.org/vuln/vde-2026-004 <p>Several vulnerabilities have been identified in the WAGO 852‑1328 device&#39;s web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication bypass, and insecure credential storage.</p> <p>Several vulnerabilities have been identified in the WAGO 852‑1328 device&#39;s web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication bypass, and insecure credential storage.</p> https://cve.radiocsirt.org/vuln/vde-2026-004