Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:39:44 +0000 CVE-2025-25264 — Overly Permissive CORS Policy in WAGO Device Manager https://cve.radiocsirt.org/vuln/cve-2025-25264 <p><strong>Affected:</strong> WAGO CC100 0751-9x01, WAGO PFC100 G1 0750-810x/xxxx-xxxx, WAGO PFC100 G2 0750-811x-xxxx-xxxx, WAGO PFC200 G1 750-820x-xxx-xxx, WAGO PFC200 G2 750-821x-xxx-xxx, WAGO TP600 0762-420x/8000-000x, WAGO TP600 0762-430x/8000-000x, WAGO TP600 0762-520x/8000-000x, WAGO TP600 0762-530x/8000-000x, WAGO TP600 0762-620x/8000-000x and 2 more</p> <p>An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.</p> <p><strong>Affected:</strong> WAGO CC100 0751-9x01, WAGO PFC100 G1 0750-810x/xxxx-xxxx, WAGO PFC100 G2 0750-811x-xxxx-xxxx, WAGO PFC200 G1 750-820x-xxx-xxx, WAGO PFC200 G2 750-821x-xxx-xxx, WAGO TP600 0762-420x/8000-000x, WAGO TP600 0762-430x/8000-000x, WAGO TP600 0762-520x/8000-000x, WAGO TP600 0762-530x/8000-000x, WAGO TP600 0762-620x/8000-000x and 2 more</p> <p>An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.</p> https://cve.radiocsirt.org/vuln/cve-2025-25264