Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:36:52 +0000 EUVD-2026-383142 https://cve.radiocsirt.org/vuln/euvd-2026-383142 EUVD-2026-383142 https://cve.radiocsirt.org/vuln/euvd-2026-383142 fkie_cve-2026-94293 https://cve.radiocsirt.org/vuln/fkie_cve-2026-94293 <p>An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.</p> <p>An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-94293 GHSA-38w2-7jv3-258f https://cve.radiocsirt.org/vuln/ghsa-38w2-7jv3-258f <p>An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.</p> <p>An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.</p> https://cve.radiocsirt.org/vuln/ghsa-38w2-7jv3-258f VDE-2026-108 — Murrelektronik: Missing Authentication in aas-edge-client Reference Implementation allows Manipulation of AAS Data https://cve.radiocsirt.org/vuln/vde-2026-108 <p>The aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by Murrelektronik GmbH on GitHub for the LNI 4.0 testbed demonstrator. Its REST API is bound to all network interfaces on TCP port 18000, requires no authentication and accepts cross-origin requests from any origin. The reference implementation was never intended for productive use and is no longer maintained. Affected are all aas-edge-client versions.</p> <p>The aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by Murrelektronik GmbH on GitHub for the LNI 4.0 testbed demonstrator. Its REST API is bound to all network interfaces on TCP port 18000, requires no authentication and accepts cross-origin requests from any origin. The reference implementation was never intended for productive use and is no longer maintained. Affected are all aas-edge-client versions.</p> https://cve.radiocsirt.org/vuln/vde-2026-108