57582 matches found
MINI-RFWC-MP39-FW9F
Bulletin has no description...
MINI-WM5M-648P-VF5M
Bulletin has no description...
CVE-2026-15961 Power System Information Disclosure
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings...
MINI-M4M6-J3WM-M576
Bulletin has no description...
CVE-2026-71961
Cudy WR3000 firmware before 2.5.24 is vulnerable: the sync_command binary passes unsanitized MQTT input to a shell sink in command.lua, allowing authenticated attackers with broker access to execute arbitrary root-level commands. CVSS 8.8 HIGH; update to firmware 2.5.24. No in-the-wild exploitati...
EUVD-2026-62418
Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary OS commands with root privileges by sending unsanitized input through the mesh MQTT command interface. The synccommand binary forwards unsanitized...
CVE-2026-71961 Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler
Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary OS commands with root privileges by sending unsanitized input through the mesh MQTT command interface. The synccommand binary forwards unsanitized...
EUVD-2026-62417
Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the...
CVE-2026-71960 Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT
Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the...
CVE-2026-50720
The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...
MINI-725C-2MPQ-7V4C
Bulletin has no description...
MINI-G88X-CVCP-C3VX
Bulletin has no description...
MINI-462X-PXMF-HH5X
Bulletin has no description...
MINI-W65M-4XP4-43XH
Bulletin has no description...
MINI-4M4M-MM8P-M89C
Bulletin has no description...
MINI-868G-P5F2-XW86
Bulletin has no description...
MINI-CMGF-MG8P-FXM4
Bulletin has no description...
MINI-VRM6-8G3C-R2RH
Bulletin has no description...