https://vulnogram.org/ Most recent CVEs assigned by HackRTU (hackrtu). https://vulnogram.org/seaview/icons/hackrtu.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-27867 https://vulnogram.org/CVE-2026-27867 An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, registration action is required) who has the vulnerable firmware version could inject a specific payload via the parameter "cmdcookie" withing the /… Medium Fri, 25 Sep 2026 10:32:58 GMT https://vulnogram.org/CVE-2026-27869 https://vulnogram.org/CVE-2026-27869 An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interf… Medium Network Exploitable Wed, 17 Jun 2026 08:13:37 GMT https://vulnogram.org/CVE-2026-27870 https://vulnogram.org/CVE-2026-27870 An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, registration action IS required) who has the vulnerable software could, introduce arbitrary JavaScript by injecting a Cross-site Scripting (XSS) pay… Medium Wed, 17 Jun 2026 08:13:37 GMT https://vulnogram.org/CVE-2026-27868 https://vulnogram.org/CVE-2026-27868 An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could obtain privilege information by using the command Version via the path: /u… Medium Network Exploitable Wed, 17 Jun 2026 08:13:36 GMT https://vulnogram.org/CVE-2025-13651 https://vulnogram.org/CVE-2025-13651 Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web Application Fingerprinting of sensitive data. This issue affects ZeusWeb: 6.1.31. Medium Network Exploitable Wed, 11 Feb 2026 09:06:09 GMT https://vulnogram.org/CVE-2025-13650 https://vulnogram.org/CVE-2025-13650 An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS p… Medium Wed, 11 Feb 2026 09:05:55 GMT https://vulnogram.org/CVE-2025-13649 https://vulnogram.org/CVE-2025-13649 An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS p… Medium Wed, 11 Feb 2026 09:05:28 GMT https://vulnogram.org/CVE-2025-13648 https://vulnogram.org/CVE-2025-13648 An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is required) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Name’ and “Surname” pa… Medium Wed, 11 Feb 2026 09:05:07 GMT