https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:02:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-369793 EUVD-2026-369793 https://cve.radiocsirt.org/vuln/euvd-2026-369793 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90848 <p>A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.</p> <p>A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-90848 https://cve.radiocsirt.org/vuln/ghsa-492q-f4p6-w72v <p>A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.</p> <p>A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.</p> https://cve.radiocsirt.org/vuln/ghsa-492q-f4p6-w72v https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90848 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ausweisapp2, Ubuntu:22.04:LTS: ausweisapp2, Ubuntu:24.04:LTS: ausweisapp2, Ubuntu:26.04:LTS: ausweisapp2</p> <p>A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ausweisapp2, Ubuntu:22.04:LTS: ausweisapp2, Ubuntu:24.04:LTS: ausweisapp2, Ubuntu:26.04:LTS: ausweisapp2</p> <p>A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90848 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3356 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Governikus AusweisApp2 ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Governikus AusweisApp2 ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3356