https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:00:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-360183 EUVD-2026-360183 https://cve.radiocsirt.org/vuln/euvd-2026-360183 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8173 <p>The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the &#39;Copy learned MAC Addresses&#39; function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.</p> <p>The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the &#39;Copy learned MAC Addresses&#39; function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8173 https://cve.radiocsirt.org/vuln/ghsa-f42v-6cfh-6pj5 <p>The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the &#39;Copy learned MAC Addresses&#39; function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.</p> <p>The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the &#39;Copy learned MAC Addresses&#39; function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.</p> https://cve.radiocsirt.org/vuln/ghsa-f42v-6cfh-6pj5 https://cve.radiocsirt.org/vuln/vde-2026-061 <p>An information disclosure vulnerability in the web GUI of Murrelektronik Xelity switches causes MAC addresses from the device&#39;s MAC address table to be written into a server-side log that is exposed via the device&#39;s web interface to unauthenticated users. The leak is triggered when an authenticated administrator invokes the &#39;Copy learned MAC Addresses&#39; function, which causes a syslog error that inserts the affected MAC addresses into the log output. Once the error has been triggered, any unauthenticated attacker with network access to the web interface can retrieve the leaked MAC addresses via common browser developer tools. The vulnerable functionality was introduced in version 2.1.0 and is fixed in version 2.1.1.</p> <p>An information disclosure vulnerability in the web GUI of Murrelektronik Xelity switches causes MAC addresses from the device&#39;s MAC address table to be written into a server-side log that is exposed via the device&#39;s web interface to unauthenticated users. The leak is triggered when an authenticated administrator invokes the &#39;Copy learned MAC Addresses&#39; function, which causes a syslog error that inserts the affected MAC addresses into the log output. Once the error has been triggered, any unauthenticated attacker with network access to the web interface can retrieve the leaked MAC addresses via common browser developer tools. The vulnerable functionality was introduced in version 2.1.0 and is fixed in version 2.1.1.</p> https://cve.radiocsirt.org/vuln/vde-2026-061