https://vulnerability.circl.lu/cna-root/CISA/recent Most recent vulnerabilities from the CISA CNA root 2026-08-25T16:40:27.880919+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the CISA root of the CVE Program. https://vulnerability.circl.lu/vuln/cve-2026-63587 CVE-2026-63587 (CERTVDE) 2026-08-25T08:55:12.442000+00:00 SMS Password Authorization Bypass via Failed Attempt Counter SMS Password Authorization Bypass via Failed Attempt Counter 2026-08-25T08:55:12.442000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-63586 CVE-2026-63586 (CERTVDE) 2026-08-25T08:54:55.934000+00:00 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface 2026-08-25T08:54:55.934000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-34491 CVE-2026-34491 (jci) 2026-08-24T17:24:25.732000+00:00 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1. Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1. 2026-08-24T17:24:25.732000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-78416 CVE-2026-78416 (Hackrate) 2026-08-24T15:36:07.971000+00:00 Authenticated RCE via `condition.config` JSON cleanse bypass Authenticated RCE via `condition.config` JSON cleanse bypass 2026-08-24T15:36:07.971000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-78317 CVE-2026-78317 (Deltaww) 2026-08-24T09:34:58.858000+00:00 DIAEnergie - SQL Injection DIAEnergie - SQL Injection 2026-08-24T09:34:58.858000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-78316 CVE-2026-78316 (Deltaww) 2026-08-24T09:34:38.089000+00:00 DIAEnergie - SQL Injection DIAEnergie - SQL Injection 2026-08-24T09:34:38.089000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-78315 CVE-2026-78315 (Deltaww) 2026-08-24T09:34:21.453000+00:00 DIAEnergie - SQL Injection DIAEnergie - SQL Injection 2026-08-24T09:34:21.453000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-78314 CVE-2026-78314 (Deltaww) 2026-08-24T09:33:51.798000+00:00 DIAEnergie - SQL Injection DIAEnergie - SQL Injection 2026-08-24T09:33:51.798000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-8173 CVE-2026-8173 (CERTVDE) 2026-08-24T06:47:58.406000+00:00 Information Disclosure via 'Copy learned MAC Addresses' Function Information Disclosure via 'Copy learned MAC Addresses' Function 2026-08-24T06:47:58.406000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-27875 CVE-2026-27875 (jci) 2026-08-21T17:52:49.383000+00:00 Simplex Incident Manager Clear Test Simplex Incident Manager Clear Test 2026-08-21T17:52:49.383000+00:00