Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:06:07 +0000 EUVD-2026-352897 https://cve.radiocsirt.org/vuln/euvd-2026-352897 EUVD-2026-352897 https://cve.radiocsirt.org/vuln/euvd-2026-352897 fkie_cve-2026-57469 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57469 <p>Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator, including deletion of project and configuration files and reset of the control runtime, by inducing the victim&#39;s browser to submit crafted requests.</p> <p>Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator, including deletion of project and configuration files and reset of the control runtime, by inducing the victim&#39;s browser to submit crafted requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-57469 GHSA-hx5m-v9rj-h34v https://cve.radiocsirt.org/vuln/ghsa-hx5m-v9rj-h34v <p>Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator, including deletion of project and configuration files and reset of the control runtime, by inducing the victim&#39;s browser to submit crafted requests.</p> <p>Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator, including deletion of project and configuration files and reset of the control runtime, by inducing the victim&#39;s browser to submit crafted requests.</p> https://cve.radiocsirt.org/vuln/ghsa-hx5m-v9rj-h34v