CVE-2026-27146

creationtimestamp| type| source ---|---|--- 2026-02-21 12:20:42+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3mfemcj7yg42m...

CVE-2024-27146

creationtimestamp| type| source ---|---|--- 2025-11-07 11:09:25+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m4zwvhgv522a...

CVE-2025-27146

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability h...

CVE-2025-27146

creationtimestamp| type| source ---|---|--- 2025-02-25 20:22:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5373 2025-02-25 23:14:24+00:00| seen| https://t.me/cvedetector/18922...

CVE-2025-27146

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability h...

CVE-2025-27146 Matrix IRC Bridge allows IRC command injection to own puppeted user

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability h...

CVE-2025-27146 Matrix IRC Bridge allows IRC command injection to own puppeted user

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability h...

CVE-2025-27146 Matrix IRC Bridge allows IRC command injection to own puppeted user

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability h...

CVE-2025-27146

Summary (CVE-2025-27146): The Matrix-based bridge matrix-appservice-irc (Node.js) up to version 3.0.3 contains a vulnerability that allows an attacker to inject and execute arbitrary IRC commands as their own puppeted user. The issue is resolved in version 3.0.4. Multiple connected sources corrob...

CVE-2024-27146 Lack of privileges separation

The Toshiba printers do not implement privileges separation. As for the affected products/models/versions, see the reference URL...

CVE-2024-27146

Summary (CVE-2024-27146): The Toshiba printers (notably Toshiba e-STUDIO/MFPs) are affected by a lack of privileges separation. The issue is documented across multiple sources (NVD, CVE lists, OpenVAS entry, and vendor advisories) and is described as the ability for an attacker who can access the...

CVE-2022-27146

creationtimestamp| type| source ---|---|--- 2022-04-08 20:16:21+00:00| seen| https://t.me/cibsecurity/40393...

CVE-2022-27146

GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag...

UBUNTU-CVE-2022-27146

GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag...

CVE-2022-27146

CVE-2022-27146: GPAC mp4box (1.1.0-DEV-rev1759-geb2d1e6dd) suffers a heap-buffer-overflow in gf_isom_apple_enum_tag. Public documents confirm the issue but do not provide exploit details. The Gentoo GLSA 202408-21 indicates upgrades to latest GPAC (gpac-2.2.0) as the remediation. Other sources re...

CVE-2021-27146

The CVE-2021-27146 vulnerability affects FiberHome HG6245D devices (RP2613) where the web daemon contains hardcoded admin/CUadmin credentials, enabling unauthorized access over the network. Public sources (NVD entry) describe a high/critical impact with authentication bypass and partial confident...

CVE-2020-27146

creationtimestamp| type| source ---|---|--- 2020-11-10 20:26:57+00:00| seen| https://t.me/cibsecurity/16107...

CVE-2020-27146

The CVE-2020-27146 issue affects TIBCO iProcess Workspace (Browser) Core. A CSRF vulnerability could allow an unauthenticated attacker with network access to trigger actions on behalf of an authenticated user, requiring user interaction. Impact is limited to versions 11.6.0 and earlier. The issue...