https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 00:04:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351872 EUVD-2026-351872 https://cve.radiocsirt.org/vuln/euvd-2026-351872 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34184 <p>AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database.</p> <p>This issue was fixed in AlanWeb SCADA version 9.8.5</p> <p>AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database.</p> <p>This issue was fixed in AlanWeb SCADA version 9.8.5</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34184 https://cve.radiocsirt.org/vuln/ghsa-hh72-xj72-2c38 <p>Hydrosystem Control System does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database.This issue was fixed in Hydrosystem Control System version 9.8.5</p> <p>Hydrosystem Control System does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database.This issue was fixed in Hydrosystem Control System version 9.8.5</p> https://cve.radiocsirt.org/vuln/ghsa-hh72-xj72-2c38