gdid-reversal

Análisis completo del GDID de Windows Identificador Global de Dispositivo completamente ingeniado inversamente -8a2be2 -0078d6 Cómo se genera, almacena y transmite realmente el "Identificador Global de Dispositivo" de Microsoft, la huella persistente de Windows mencionada en la denuncia de julio ...

EUVD-2026-73003

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-69516: Use After Free

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-9593

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory, potentially resulting in unauthorized access to connected devices and exposure, modification, or disrupti...

CVE-2026-10045 CVE-2026-10045

Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash...

EUVD-2026-35790

Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash...

Kangda Xin DR300 安全漏洞

Kangda Xin DR300 is a wireless router produced by Kangda Xin Corporation. The Kangda Xin DR300 version 2.1.2.121 has a security vulnerability. This vulnerability stems from the inclusion of hardcoded login credentials, with telnet being enabled by default. It may allow attackers to read memory,...

CVE-2026-32999

CVE-2026-32999 affects Comet Backup server; the issue is insufficient character filtering in the backup agent signing module. This vulnerability allows an authenticated tenant administrator to execute arbitrary code on behalf of a privileged user on the affected server and connected devices. The ...

PT-2026-44177

Name of the Vulnerable Software and Affected Versions Comet Backup versions prior to 26.4.3 Comet Backup versions prior to 26.5.0 Description Insufficient character filtering in the backup agent signing module allows an authenticated tenant administrator with branding permissions to execute...

CVE-2026-36539

Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skkget.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi...

CVE-2026-36539

Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skkget.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi...

EUVD-2026-30056

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

CVE-2026-24292

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Connected Devices Platform Service for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

EUVD-2026-10616

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

EUVD-2026-10617

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-24292

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-24292

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2026-24292

CVE-2026-24292 is a Windows vulnerability in the Connected Devices Platform Service (Cdpsvc) described as a use-after-free that enables local privilege escalation for an authenticated, non-user interaction scenario. Connected documents corroborate the issue with Cdpsvc and list the CVE-2026-24292...