https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:43:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06523 bdu:2025-06523 https://cve.radiocsirt.org/vuln/bdu:2025-06523 https://cve.radiocsirt.org/vuln/cnvd-2025-10579 cnvd-2025-10579 https://cve.radiocsirt.org/vuln/cnvd-2025-10579 https://cve.radiocsirt.org/vuln/euvd-2026-239140 EUVD-2026-239140 https://cve.radiocsirt.org/vuln/euvd-2026-239140 https://cve.radiocsirt.org/vuln/fkie_cve-2025-26389 <p>A vulnerability has been identified in OZW672 (All versions &lt; V8.0), OZW772 (All versions &lt; V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.</p> <p>A vulnerability has been identified in OZW672 (All versions &lt; V8.0), OZW772 (All versions &lt; V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-26389 https://cve.radiocsirt.org/vuln/ghsa-mhmm-4g6x-6p5g <p>A vulnerability has been identified in OZW672 (All versions &lt; V8.0), OZW772 (All versions &lt; V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.</p> <p>A vulnerability has been identified in OZW672 (All versions &lt; V8.0), OZW772 (All versions &lt; V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-mhmm-4g6x-6p5g https://cve.radiocsirt.org/vuln/icsa-25-135-10 <p>The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.</p> <p>The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.</p> https://cve.radiocsirt.org/vuln/icsa-25-135-10