CVE-2025-66176

CVE-2025-66176 describes a stack overflow in the device Search and Discovery feature of Hikvision Access Control Products. Reported as exploitable by an attacker on the same LAN who can cause device malfunction by sending specially crafted packets to an unpatched device. Affected product scope is...

Hikvision Partial Access Control Series Products 安全漏洞

Hikvision Partial Access Control Series Products is a series of access control devices from Hikvision, a Chinese company. A security vulnerability exists in Hikvision Partial Access Control Series Products, which stems from a stack overflow in the device's search and discovery functionality, whic...

PT-2026-2631

Name of the Vulnerable Software and Affected Versions NETGEAR WiFi range extenders affected versions not specified Description A path traversal issue exists in NETGEAR WiFi range extenders. An attacker with LAN authentication can access the router's IP address and review the contents of the...

CVE-2026-0405: Improper Authentication

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin...

NETGEAR Orbi 安全漏洞

NETGEAR Orbi is a distributed WiFi system from NETGEAR. A security vulnerability exists in NETGEAR Orbi that stems from an authentication bypass that could cause a local network user to access the router web interface as an administrator...

PT-2026-2628

Name of the Vulnerable Software and Affected Versions NETGEAR Orbi affected versions not specified Description A flaw exists that allows users on the local network to gain administrative access to the router web interface without proper authentication. This bypass enables unauthorized access to...

CVE-2026-22805 Metabase channel test endpoint can reach internal local addresses

Metabase is an open-source data analytics platform. Prior to 55.13, 56.3, and 57.1, self-hosted Metabase instances that allow users to create subscriptions could be potentially impacted if their Metabase is colocated with other unsecured resources. This vulnerability is fixed in 55.13, 56.3, and...

AZL-74274 CVE-2025-68468 affecting package avahi for versions less than 0.8-5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they...

CVE-2025-68276

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon with wide-area disabled by creating record browsers with the AVAHILOOKUPUSEWIDEAREA flag set via D-Bus. This can ...

CVE-2025-68468

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they...

CVE-2025-68471 Avahi has a reachable assertion in lookup_start

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart...

CVE-2025-68471

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart...

CVE-2025-68471 Avahi has a reachable assertion in lookup_start

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart...

CVE-2025-68468

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they...

CVE-2025-68276 Avahi has a reachable assertion in avahi_wide_area_scan_cache

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon with wide-area disabled by creating record browsers with the AVAHILOOKUPUSEWIDEAREA flag set via D-Bus. This can ...

EUVD-2025-206280

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon with wide-area disabled by creating record browsers with the AVAHILOOKUPUSEWIDEAREA flag set via D-Bus. This can ...

CVE-2025-68276

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon with wide-area disabled by creating record browsers with the AVAHILOOKUPUSEWIDEAREA flag set via D-Bus. This can ...

PT-2026-2348

Name of the Vulnerable Software and Affected Versions Hikvision NVR/DVR/CVR/IPC models affected versions not specified Description A stack overflow issue exists in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. An attacker on the same local area network LAN could cau...

PT-2026-28911

Уязвимость системы обнаружения сервисов в локальной сети Avahi связана с недостатком использования функции assert. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2026-28912

Уязвимость системы обнаружения сервисов в локальной сети Avahi связана с недостатком использования функции assert. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...