11 matches found
LazyMesh
LazyMesh Mesh routing system that supports using an OpenDHT proxy as the backend, so that nodes can communicate directly via the internet. Very early pre alpha, proof of concept, might not actually work, etc. This is meant for both hobby/HAM use cases, and more typical consumer/commercial IoT wor...
Security Bulletin: Consul vulnerable to an authorization bypass in health check registration
Summary HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability CVE-2026-115804 is fixed in Consul Community Edition...
Consul vulnerable to an authorization bypass in health check registration
Summary HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability CVE-2026-115804 is fixed in Consul Community Edition...
CVE-2026-51642
Incorrect access control in the getMeshRoutingTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh routing information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51642
Incorrect access control in the getMeshRoutingTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh routing information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51642
The TOTOLINK T6 (version 4.1.5cu.748_B20211015) is susceptible to an incorrect access control vulnerability within the getMeshRoutingTable function. This flaw allows unauthenticated attackers to retrieve sensitive mesh routing information by sending a crafted POST request to the /cgi-bin/cstecgi....
CVE-2026-51642
Incorrect access control in the getMeshRoutingTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh routing information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51642: Improper Access Control
Incorrect access control in the getMeshRoutingTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh routing information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
PT-2026-83207
Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the getMeshRoutingTable function allows unauthenticated attackers to obtain mesh routing information. This is achieved by sending a crafted POST request to the...
CVE-2026-52926
A flaw was found in the Linux kernel's batman-adv module, which is responsible for managing mesh networks. When a mesh network is being shut down, the system fails to properly clear the active gateway information. This leaves outdated network configuration data, which can prevent the mesh network...
