CVE-2026-82548 Linux Foundation Magma InitialUEMessage information disclosure

A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-82487

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

CVE-2026-82539 TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

CVE-2026-82539 TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

CVE-2026-82487 Beetel 450TC3 password recovery

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

EUVD-2026-68177

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

CVE-2026-82487

Beetel 450TC3 router (firmware 01.00.00_01 ) is affected by a weak password recovery vulnerability that enables authenticated privilege escalation . The attack is executable remotely with low privileges and no user interaction. The affected component is described as an unknown part in the provide...

EUVD-2026-68172

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/proedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

PT-2026-83539

Name of the Vulnerable Software and Affected Versions Beetel 450TC3 version 01.00.00 01 Description A remote manipulation allows for weak password recovery. This issue affects an unspecified component of the system. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-82487: Weak Password Recovery Mechanism for Forgotten Password

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

PT-2026-83535

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/pro edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

PT-2026-83589

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngap amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

CVE-2026-81485

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2026-79911

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible t...

CVE-2026-79793

code-projects Online Shopping System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /admin/sumit_form.php , caused by insufficient input validation on the Success argument. The attack is remote and requires user interaction , but no authentication is needed. Impact is r...

CVE-2026-79623 FishCodeTech Muteki Default Local Worker Backend settings.json os command injection

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The...

CVE-2026-79623 FishCodeTech Muteki Default Local Worker Backend settings.json os command injection

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The...

CVE-2026-79623 FishCodeTech Muteki Default Local Worker Backend settings.json os command injection

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The...

CVE-2026-78435

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely...

CVE-2026-78435 Faveo Helpdesk Logo SettingsController.php unlink path traversal

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely...