<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>CODRA — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/codra" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by CODRA (codra).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/codra.png</url>
      <title>CODRA — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:08 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-4761 · 3.3 LOW — Unnecessary permissions on private keys of certificates installed by Network and Security Wizard</title>
      <link>https://vulnogram.org/CVE-2026-4761</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-4761</guid>
      <description>When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group. * Installations based on Panorama Suite 2…</description>
      <category>Low</category>
      <pubDate>Wed, 25 Mar 2026 12:45:27 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-4760 · 7.7 HIGH 🌩️ — Potential unauthorized access to files on the Web HMI server host</title>
      <link>https://vulnogram.org/CVE-2026-4760</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-4760</guid>
      <description>From Panorama Web HMI, an attacker can gain read access to certain Web HMI server files, if he knows their paths and if these files are accessible to the Servin process execution account. * Installations based on Panorama Suite 2022-SP1 (22.50.005) a…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 25 Mar 2026 12:29:13 GMT</pubDate>
    </item>
  </channel>
</rss>
