https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:11:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-02897 bdu:2025-02897 https://cve.radiocsirt.org/vuln/bdu:2025-02897 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0191 certfr-2025-avi-0191 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0191 https://cve.radiocsirt.org/vuln/euvd-2026-221787 EUVD-2026-221787 https://cve.radiocsirt.org/vuln/euvd-2026-221787 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27397 <p>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions &lt; V4.0). Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files in the filesystem, if and only if the malicious path ends with &#39;log&#39; .</p> <p>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions &lt; V4.0). Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files in the filesystem, if and only if the malicious path ends with &#39;log&#39; .</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27397 https://cve.radiocsirt.org/vuln/ghsa-gqcm-6vpg-xm6w <p>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions &lt; V4.0). Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files in the filesystem, if and only if the malicious path ends with &#39;log&#39; .</p> <p>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions &lt; V4.0). Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files in the filesystem, if and only if the malicious path ends with &#39;log&#39; .</p> https://cve.radiocsirt.org/vuln/ghsa-gqcm-6vpg-xm6w https://cve.radiocsirt.org/vuln/icsa-25-072-06 <p>Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. Affected devices do not properly sanitize user input when creating new users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. Affected devices do not properly sanitize user input when creating new SNMP users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files. Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-privileged remote attacker to escalate their privileges. Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files in the filesystem, if and only if the malicious path ends with &#39;log&#39; . Affected devices do not properly neutralize special characters when interpreting user controlled log paths. This could allow an authenticated highly-privileged remote attacker to exe…</p> <p>Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. Affected devices do not properly sanitize user input when creating new users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. Affected devices do not properly sanitize user input when creating new SNMP users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files. Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-privileged remote attacker to escalate their privileges. Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files in the filesystem, if and only if the malicious path ends with &#39;log&#39; . Affected devices do not properly neutralize special characters when interpreting user controlled log paths. This could allow an authenticated highly-privileged remote attacker to exe…</p> https://cve.radiocsirt.org/vuln/icsa-25-072-06