CVE-2026-1763

Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions...

CVE-2026-1763

Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions...

CVE-2026-1762

A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 and prior versions...

CVE-2026-1763: Path Traversal: '.../...//'

Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions...

CVE-2026-1762: Relative Path Traversal

A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 and prior versions...

PT-2026-7465

Name of the Vulnerable Software and Affected Versions GE Vernova Enervista versions prior to 8.6 Description A flaw exists in GE Vernova Enervista UR Setup on Windows that permits file manipulation. Recommendations Update to a version later than 8.6...

PT-2026-7466

Name of the Vulnerable Software and Affected Versions GE Vernova Enervista versions prior to 8.6 Description A security issue exists in GE Vernova Enervista UR Setup on Windows. The issue affects versions prior to 8.6. Recommendations Update to a version newer than 8.6...

CVE-2025-27256

Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication. Since the client connection is not authenticated, an attacker may perform a man-in-the-middle attack on the network...

GE Vernova EnerVista UR 信任管理问题漏洞

GE Vernova EnerVista UR is a device configuration tool from GE Vernova USA that is compatible with all UR relay applications. A trust management issue vulnerability exists in the GE Vernova EnerVista UR that stems from the use of hard-coded credentials, which could lead to elevation of privilege...

CVE-2025-27255: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

PT-2025-10566

Name of the Vulnerable Software and Affected Versions GE Vernova EnerVista UR Setup affected versions not specified Description The issue concerns the use of hard-coded credentials in the software, allowing privilege escalation. An attacker can retrieve the hardcoded password by analyzing the...

PT-2025-10565

Name of the Vulnerable Software and Affected Versions GE Vernova EnerVista UR Setup affected versions not specified Description The issue concerns an improper authentication vulnerability that allows authentication bypass. It is possible to disable the software's startup authentication by modifyi...

CVE-2025-27254: Improper Ownership Management

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass. The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify...

GE Vernova EnerVista UR 授权问题漏洞

GE Vernova EnerVista UR is a device configuration tool from GE Vernova USA that is compatible with all UR relay applications. An authorization issue vulnerability exists in the GE Vernova EnerVista UR that stems from improper authentication and could lead to authentication bypass...

CVE-2025-27256: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication. Since the client connection is not authenticated, an attacker may perform a man-in-the-middle attack on the network...

PT-2025-10567

Name of the Vulnerable Software and Affected Versions GE Vernova Enervista UR Setup affected versions not specified Description The issue concerns a Missing Authentication for Critical Function vulnerability. It allows for Authentication Bypass due to a missing SSH server authentication, enabling...