Lucene search
+L

14 matches found

NVD
NVD
•added 2026/09/16 8:16 a.m.•14 views

CVE-2026-27563

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS0.0273EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/16 8:16 a.m.•17 views

CVE-2026-27564

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS0.0273EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/16 7:52 a.m.•18 views

CVE-2026-27564 Command Injection via PUT in /api/datastorage/data

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS6.1AI score0.0273EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/16 7:52 a.m.•35 views

CVE-2026-27564 Command Injection via PUT in /api/datastorage/data

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS0.0273EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/16 7:52 a.m.•21 views

EUVD-2026-80247

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS5.9AI score0.0273EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/16 7:52 a.m.•34 views

CVE-2026-27564

CVE-2026-27564 is a command injection vulnerability in the /api/datastorage/data endpoint, where a remote attacker holding admin credentials can send a PUT request to execute arbitrary commands with root privileges on the device. The specific affected product is not named in the provided document...

7.2CVSS6.1AI score0.0273EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/16 7:52 a.m.•39 views

CVE-2026-27563 Command Injection via GET in /api/datastorage/data

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS0.0273EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/16 7:52 a.m.•11 views

CVE-2026-27563 Command Injection via GET in /api/datastorage/data

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS6.1AI score0.0273EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/16 7:52 a.m.•17 views

EUVD-2026-80246

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS5.9AI score0.0273EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/16 7:52 a.m.•30 views

CVE-2026-27563

CVE-2026-27563 is a command injection vulnerability in the /api/datastorage/data endpoint. A high-privileged remote attacker with admin credentials can send a crafted GET request to execute arbitrary commands with root privileges on the affected device. The vulnerability is scored CVSS 3.1: 7.2 (...

7.2CVSS6.1AI score0.0273EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•2 views

CVE-2026-27563: Improper Neutralization of Special Elements used in an OS Command

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS6.1AI score0.0273EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•36 views

PT-2026-93357

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS5.9AI score0.0273EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•30 views

PT-2026-93356

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A high-privileged remote attacker can execute commands with root privileges on the device via a command injection flaw. This occurs when a crafted GET request is...

7.2CVSS6.1AI score0.0273EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•4 views

CVE-2026-27564: Improper Neutralization of Special Elements used in an OS Command

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device...

7.2CVSS6.1AI score0.0273EPSS
SaveExploits0References2
Rows per page
Query Builder