https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:57:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04012 bdu:2025-04012 https://cve.radiocsirt.org/vuln/bdu:2025-04012 https://cve.radiocsirt.org/vuln/cnvd-2025-07809 cnvd-2025-07809 https://cve.radiocsirt.org/vuln/cnvd-2025-07809 https://cve.radiocsirt.org/vuln/euvd-2026-227566 EUVD-2026-227566 https://cve.radiocsirt.org/vuln/euvd-2026-227566 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41789 <p>A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.</p> <p>A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-41789 https://cve.radiocsirt.org/vuln/ghsa-qj4h-xmxf-3pc7 <p>A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.</p> <p>A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-qj4h-xmxf-3pc7 https://cve.radiocsirt.org/vuln/icsa-25-100-06 <p>The web interface of affected devices does not sanitize the input parameters in specific GET requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. The web interface of affected devices does not sanitize the region parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the date and time. The web interface of affected devices contains a path traversal vulnerability. This could allow an unauthenticated attacker it to access arbitrary files on the device with root privileges. The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh. Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if t…</p> <p>The web interface of affected devices does not sanitize the input parameters in specific GET requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. The web interface of affected devices does not sanitize the region parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the date and time. The web interface of affected devices contains a path traversal vulnerability. This could allow an unauthenticated attacker it to access arbitrary files on the device with root privileges. The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh. Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if t…</p> https://cve.radiocsirt.org/vuln/icsa-25-100-06 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0772 <p>Ein Angreifer kann mehrere Schwachstellen in Siemens Sentron PAC ausnutzen, um beliebigen Code mit administrativen Rechten auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, erhöhte Rechte zu erlangen und vertrauliche Informationen preiszugeben.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Siemens Sentron PAC ausnutzen, um beliebigen Code mit administrativen Rechten auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, erhöhte Rechte zu erlangen und vertrauliche Informationen preiszugeben.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0772