https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:30:14 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-34874 cnvd-2026-34874 https://cve.radiocsirt.org/vuln/cnvd-2026-34874 https://cve.radiocsirt.org/vuln/euvd-2026-351714 EUVD-2026-351714 https://cve.radiocsirt.org/vuln/euvd-2026-351714 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57262 <p>A vulnerability has been identified in LOGO! Soft Comfort (All versions &lt; V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.</p> <p>A vulnerability has been identified in LOGO! Soft Comfort (All versions &lt; V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-57262 https://cve.radiocsirt.org/vuln/ghsa-f96f-m7rh-gphp <p>A vulnerability has been identified in LOGO! Soft Comfort (All versions &lt; V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.</p> <p>A vulnerability has been identified in LOGO! Soft Comfort (All versions &lt; V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.</p> https://cve.radiocsirt.org/vuln/ghsa-f96f-m7rh-gphp https://cve.radiocsirt.org/vuln/icsa-26-225-13 <p>Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of password salting enables offline dictionary or brute-force attacks against the password hashes. Successful exploitation could result in unauthorized access to, or modification of, sensitive project logic and configurations.</p> <p>Siemens has released a new version for LOGO! Soft Comfort and recommends to update to the latest version.</p> <p>Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of password salting enables offline dictionary or brute-force attacks against the password hashes. Successful exploitation could result in unauthorized access to, or modification of, sensitive project logic and configurations.</p> <p>Siemens has released a new version for LOGO! Soft Comfort and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/icsa-26-225-13 https://cve.radiocsirt.org/vuln/ncsc-2026-0282 NCSC-2026-0282 https://cve.radiocsirt.org/vuln/ncsc-2026-0282 https://cve.radiocsirt.org/vuln/ssa-751328 <p>Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of password salting enables offline dictionary or brute-force attacks against the password hashes. Successful exploitation could result in unauthorized access to, or modification of, sensitive project logic and configurations.</p> <p>Siemens has released a new version for LOGO! Soft Comfort and recommends to update to the latest version.</p> <p>Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of password salting enables offline dictionary or brute-force attacks against the password hashes. Successful exploitation could result in unauthorized access to, or modification of, sensitive project logic and configurations.</p> <p>Siemens has released a new version for LOGO! Soft Comfort and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/ssa-751328