Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000327 advisory. An issue was discovered in drmloadedidfirmware in drivers/gpu/drm/drmedidload.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which migh...

PT-2026-1551

Name of the Vulnerable Software and Affected Versions TP-Link Archer BE400 version 1.1.0 Build 20250710 rel.14914 Description A flaw exists in the 802.11 modules of the TP-Link Archer BE400 that can lead to a denial-of-service DoS condition. An attacker in close proximity can trigger a device...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that stems from the handling of firmware events that could lead to information disclosure...

PT-2026-1845

Name of the Vulnerable Software and Affected Versions Columbia Weather Systems MicroServer affected versions not specified Description The MicroServer copies portions of the system firmware to an unencrypted external SD card during boot. This firmware includes user and vendor secrets in plaintext...

CVE-2025-47395 Buffer Over-read in WLAN Firmware

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element...

CVE-2025-47395 Buffer Over-read in WLAN Firmware

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element...

CVE-2025-47395

CVE-2025-47395 concerns Qualcomm chipsets’ WLAN firmware. The issue is a transient denial-of-service that occurs while parsing a WLAN management frame containing a Vendor Specific Information Element. Impact is the potential disruption of service (availability) with no confidentiality/integrity l...

CVE-2025-47331

Technical details are not publicly available in the provided documents for CVE-2025-47331; monitor for updates.

CVE-2025-47331 Buffer Over-read in Video

Information disclosure while processing a firmware event...

CVE-2025-47331 Buffer Over-read in Video

Information disclosure while processing a firmware event...

CVE-2025-47330 Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware...

CVE-2025-47330 Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware...

CVE-2025-47330

CVE-2025-47330 affects Qualcomm chipsets, with the issue described as a transient denial-of-service during parsing of video packets from the video firmware. The published metrics indicate local attack vector, low privileges, no user interaction, and an availability impact rated as high (CVSS 3.1:...

CVE-2025-15471

A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted element is an unknown function of the file /goformX/formFSrvX. The manipulation of the argument SZCMD results in os command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The...

Exploit for CVE-2020-98765

FirmwareForge - Advanced Firmware & Hardware Exploitation Tool...

Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover

The CERT Coordination Center CERT/CC has disclosed details of an unpatched security flaw impacting TOTOLINK EX200 wireless range extender that could allow a remote authenticated attacker to gain full control of the device. The flaw, CVE-2025-65606 CVSS score: N/A, has been characterized as a flaw...

CVE-2026-21411

Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password...

CVE-2026-21411

Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password...

CVE-2026-21411

CVE-2026-21411 affects Plat’Home OpenBlocks series (OpenBlocks IoT VX2) prior to FW5.0.8. Root cause: authentication bypass vulnerability allowing a user to bypass administrator authentication and change passwords. Impact is high (unauthenticated access to change credentials; confidentiality, int...

PT-2026-1500

Name of the Vulnerable Software and Affected Versions TOTOLINK EX200 affected versions not specified Description A critical flaw exists in the TOTOLINK EX200 wireless extender that allows for full remote control of the device. The issue stems from a vulnerability in the firmware-upload error...