https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:10:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-00472 bdu:2025-00472 https://cve.radiocsirt.org/vuln/bdu:2025-00472 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0036 certfr-2025-avi-0036 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0036 https://cve.radiocsirt.org/vuln/euvd-2026-210562 EUVD-2026-210562 https://cve.radiocsirt.org/vuln/euvd-2026-210562 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0193 <p>A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sanitization and encoding of user input in the &#34;Login Message&#34; functionality. An authenticated attacker with administrative access can exploit this vulnerability to inject malicious scripts that are continuously stored on the device. These scripts are executed when other users access the login page, potentially resulting in unauthorized actions or other impacts, depending on the user&#39;s privileges.</p> <p>A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sanitization and encoding of user input in the &#34;Login Message&#34; functionality. An authenticated attacker with administrative access can exploit this vulnerability to inject malicious scripts that are continuously stored on the device. These scripts are executed when other users access the login page, potentially resulting in unauthorized actions or other impacts, depending on the user&#39;s privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-0193 https://cve.radiocsirt.org/vuln/ghsa-m56g-xx45-238c <p>A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sanitization and encoding of user input in the &#34;Login Message&#34; functionality. An authenticated attacker with administrative access can exploit this vulnerability to inject malicious scripts that are continuously stored on the device. These scripts are executed when other users access the login page, potentially resulting in unauthorized actions or other impacts, depending on the user&#39;s privileges.</p> <p>A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sanitization and encoding of user input in the &#34;Login Message&#34; functionality. An authenticated attacker with administrative access can exploit this vulnerability to inject malicious scripts that are continuously stored on the device. These scripts are executed when other users access the login page, potentially resulting in unauthorized actions or other impacts, depending on the user&#39;s privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-m56g-xx45-238c