https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:39:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09949 bdu:2026-09949 https://cve.radiocsirt.org/vuln/bdu:2026-09949 https://cve.radiocsirt.org/vuln/cnvd-2026-29397 cnvd-2026-29397 https://cve.radiocsirt.org/vuln/cnvd-2026-29397 https://cve.radiocsirt.org/vuln/euvd-2026-336455 EUVD-2026-336455 https://cve.radiocsirt.org/vuln/euvd-2026-336455 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56451 <p>A vulnerability has been identified in Opcenter X (All versions &lt; V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersonate any user including administrative accounts, potentially gaining full unauthorized access to the application.</p> <p>A vulnerability has been identified in Opcenter X (All versions &lt; V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersonate any user including administrative accounts, potentially gaining full unauthorized access to the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56451 https://cve.radiocsirt.org/vuln/ghsa-j4h7-9cc4-7f3r <p>A vulnerability has been identified in Opcenter X (All versions &lt; V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersonate any user including administrative accounts, potentially gaining full unauthorized access to the application.</p> <p>A vulnerability has been identified in Opcenter X (All versions &lt; V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersonate any user including administrative accounts, potentially gaining full unauthorized access to the application.</p> https://cve.radiocsirt.org/vuln/ghsa-j4h7-9cc4-7f3r https://cve.radiocsirt.org/vuln/icsa-26-202-03 <p>Opcenter X before V2604 contain an authentication bypass vulnerability that could allow an attacker to gain full unauthorized access to the application.</p> <p>Siemens has released a new version for Opcenter X and recommends to update to the latest version.</p> <p>Opcenter X before V2604 contain an authentication bypass vulnerability that could allow an attacker to gain full unauthorized access to the application.</p> <p>Siemens has released a new version for Opcenter X and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/icsa-26-202-03 https://cve.radiocsirt.org/vuln/ncsc-2026-0229 NCSC-2026-0229 https://cve.radiocsirt.org/vuln/ncsc-2026-0229 https://cve.radiocsirt.org/vuln/ssa-096828 <p>Opcenter X before V2604 contain an authentication bypass vulnerability that could allow an attacker to gain full unauthorized access to the application.</p> <p>Siemens has released a new version for Opcenter X and recommends to update to the latest version.</p> <p>Opcenter X before V2604 contain an authentication bypass vulnerability that could allow an attacker to gain full unauthorized access to the application.</p> <p>Siemens has released a new version for Opcenter X and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/ssa-096828