Most recent entries from csaf_vegagrieshaberkg https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 07:12:03 +0000 VDE-2026-048 — VEGA: Missing Authentication for critical function in VEGAPULS Bluetooth products https://cve.radiocsirt.org/vuln/vde-2026-048 <p>Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.</p> <p>It was found that users with no or low rights can access information from devices that should not be available to them.</p> <p>An attacker can use this information to impersonate authorized users.</p> <p>Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.</p> <p>It was found that users with no or low rights can access information from devices that should not be available to them.</p> <p>An attacker can use this information to impersonate authorized users.</p> https://cve.radiocsirt.org/vuln/vde-2026-048 Mon, 04 May 2026 06:00:00 +0000 VDE-2026-046 — VEGA: Missing Authentication for critical function in VEGAPULS two- and four-wire products https://cve.radiocsirt.org/vuln/vde-2026-046 <p>Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.</p> <p>It was found that users with no or low rights can access information from devices that should not be available to them.</p> <p>An attacker can use this information to impersonate authorized users.</p> <p>Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.</p> <p>It was found that users with no or low rights can access information from devices that should not be available to them.</p> <p>An attacker can use this information to impersonate authorized users.</p> https://cve.radiocsirt.org/vuln/vde-2026-046 Mon, 04 May 2026 06:00:00 +0000 VDE-2026-016 — VEGA: Unsecured Configuration Interface Allows Unauthorized Access Leading to Privilege Escalation https://cve.radiocsirt.org/vuln/vde-2026-016 <p>Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.</p> <p>It was found that users with no or low rights can access information from devices that should not be available to them.</p> <p>An attacker can use this information to impersonate authorized users.</p> <p>Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.</p> <p>It was found that users with no or low rights can access information from devices that should not be available to them.</p> <p>An attacker can use this information to impersonate authorized users.</p> https://cve.radiocsirt.org/vuln/vde-2026-016 Wed, 22 Apr 2026 09:00:00 +0000 VDE-2026-047 — VEGA: Missing Authentication for critical function in VEGAPULS Air products https://cve.radiocsirt.org/vuln/vde-2026-047 <p>Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.</p> <p>It was found that users with no or low rights can access information from devices that should not be available to them.</p> <p>An attacker can use this information to impersonate authorized users.</p> <p>Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.</p> <p>It was found that users with no or low rights can access information from devices that should not be available to them.</p> <p>An attacker can use this information to impersonate authorized users.</p> https://cve.radiocsirt.org/vuln/vde-2026-047 Mon, 04 May 2026 06:00:00 +0000