ROOT-APP-PYPI-CVE-2026-35526 CVE-2026-35526 in rootio-strawberry-graphql - Patched by Root

Root has patched CVE-2026-35526 in the rootio-strawberry-graphql package for Root:PyPI. Multiple fixed versions available...

CVE-2026-35526

creationtimestamp| type| source ---|---|--- 2026-04-07 17:29:48+00:00| seen| Telegram/t7opZ3s7Nl85xZs745vJOFh0FG2Whznv9BGbk6FzHivbIC0 2026-04-18 08:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjqyamytkd2n...

CVE-2026-35526 Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions

Strawberry GraphQL is a library for creating GraphQL APIs. Prior to 0.312.3, Strawberry GraphQL's WebSocket subscription handlers for both the graphql-transport-ws and legacy graphql-ws protocols allocate an asyncio.Task and associated Operation object for every incoming subscribe message without...

CVE-2022-35526

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml...

CVE-2020-35526

...

CVE-2020-35526

CVE-2020-35526 entry is rejected/not used.

CVE-2022-35526

creationtimestamp| type| source ---|---|--- 2022-08-11 00:26:26+00:00| seen| https://t.me/cibsecurity/47900...

CVE-2022-35526

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml...

CVE-2022-35526

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml...

CVE-2022-35526

CVE-2022-35526 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3. The login.cgi script does not filter the key parameter, enabling command injection on the /login.shtml page. Root cause: lack of input validation on a parameter used by login.cgi. Impact (per sources): high-severity ...

CVE-2021-35526

creationtimestamp| type| source ---|---|--- 2021-09-08 20:45:58+00:00| seen| https://t.me/cibsecurity/28519...

CVE-2021-35526

CVE-2021-35526 affects Hitachi ABB Power Grids System Data Manager – SDM600 prior to 1.2 FP2 HF6 (Build Nr. 1.2.14002.257). The vulnerability is Cleartext Storage of Sensitive Information: backups are not encrypted, allowing a local OS user to modify backups, potentially overwriting system config...

Hitachi ABB Power Grids System Data Manager

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Low attack complexity Vendor: Hitachi ABB Power Grids Equipment: System Data Manager Vulnerability: Cleartext Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker access to sensitive...