https://vulnerability.circl.lu Latest vulnerabilities published by the CNAs operating under the icscert root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Tue, 25 Aug 2026 15:39:02 +0000 https://vulnerability.circl.lu/vuln/cve-2026-63587 SMS Password Authorization Bypass via Failed Attempt Counter SMS Password Authorization Bypass via Failed Attempt Counter https://vulnerability.circl.lu/vuln/cve-2026-63587 Tue, 25 Aug 2026 08:55:12 +0000 https://vulnerability.circl.lu/vuln/cve-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface https://vulnerability.circl.lu/vuln/cve-2026-63586 Tue, 25 Aug 2026 08:54:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-34491 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1. Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1. https://vulnerability.circl.lu/vuln/cve-2026-34491 Mon, 24 Aug 2026 17:24:25 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78416 Authenticated RCE via `condition.config` JSON cleanse bypass Authenticated RCE via `condition.config` JSON cleanse bypass https://vulnerability.circl.lu/vuln/cve-2026-78416 Mon, 24 Aug 2026 15:36:07 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78317 DIAEnergie - SQL Injection DIAEnergie - SQL Injection https://vulnerability.circl.lu/vuln/cve-2026-78317 Mon, 24 Aug 2026 09:34:58 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78316 DIAEnergie - SQL Injection DIAEnergie - SQL Injection https://vulnerability.circl.lu/vuln/cve-2026-78316 Mon, 24 Aug 2026 09:34:38 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78315 DIAEnergie - SQL Injection DIAEnergie - SQL Injection https://vulnerability.circl.lu/vuln/cve-2026-78315 Mon, 24 Aug 2026 09:34:21 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78314 DIAEnergie - SQL Injection DIAEnergie - SQL Injection https://vulnerability.circl.lu/vuln/cve-2026-78314 Mon, 24 Aug 2026 09:33:51 +0000 https://vulnerability.circl.lu/vuln/cve-2026-8173 Information Disclosure via 'Copy learned MAC Addresses' Function Information Disclosure via 'Copy learned MAC Addresses' Function https://vulnerability.circl.lu/vuln/cve-2026-8173 Mon, 24 Aug 2026 06:47:58 +0000 https://vulnerability.circl.lu/vuln/cve-2026-27875 Simplex Incident Manager Clear Test Simplex Incident Manager Clear Test https://vulnerability.circl.lu/vuln/cve-2026-27875 Fri, 21 Aug 2026 17:52:49 +0000