Lucene search
+L

8 matches found

NVD
NVD
•added 2026/07/21 5:17 p.m.•23 views

CVE-2025-68640

The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...

5.3CVSS0.004EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/21 12:00 a.m.•28 views

CVE-2025-68640

The Apple Find My backend service is vulnerable to an authentication flaw through December 17, 2025. An attacker who obtains a valid PET (Private Endpoint Token) can enumerate devices and remove offline devices from an Apple ID account. This action bypasses two-factor authentication and ownership...

5.3CVSS5.2AI score0.004EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/21 12:00 a.m.•45 views

CVE-2025-68640

The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...

0.004EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/21 12:00 a.m.•11 views

CVE-2025-68640

The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...

5.1AI score0.004EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•66 views

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability. This vulnerability stems from the lack of mandatory implementation of topic-level access control lists by the local MQTT Broker. As a result, any client that...

9.8CVSS5.3AI score0.00466EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/04 12:00 a.m.•40 views

PT-2026-46141

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The local MQTT broker fails to enforce topic-level Access Control Lists ACLs, which are rules that define which clients can access specific topics. This allows a...

9.8CVSS5.8AI score0.00466EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•3 views

CVE-2026-49186: Improper Authentication

The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...

9.8CVSS5.8AI score0.00466EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•10 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sequoia, which stems from a permissions issue that could cause an application to enumerate devices that are logged into a user's...

5CVSS6.1AI score0.00413EPSS
SaveExploits0References3
Rows per page
Query Builder