Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:1 p.m.1 views

CVE-2026-32296

Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate...

8.8CVSS6AI score0.00106EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2026/03/18 11:42 a.m.6 views

9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors

Cybersecurity researchers have warned about the risks posed by low-cost IP KVM Keyboard, Video, Mouse over Internet Protocol devices, which can grant attackers extensive control over compromised hosts. The nine vulnerabilities, discovered by Eclypsium , span four different products from GL-iNet...

9.8CVSS6.8AI score0.0138EPSS
Exploits0
EUVD
EUVD
added 2026/03/17 6:30 p.m.3 views

EUVD-2026-12610

Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate...

8.8CVSS5.8AI score0.00106EPSS
Exploits0References5
NVD
NVD
added 2026/03/17 6:16 p.m.2 views

CVE-2026-32296

Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate...

8.8CVSS0.00106EPSS
Exploits0References4
OSV
OSV
added 2026/03/17 6:16 p.m.0 views

CVE-2026-32296

Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate...

8.8CVSS5.9AI score0.00106EPSS
Exploits0References4
CVE
CVE
added 2026/03/17 5:19 p.m.10 views

CVE-2026-32296

Sipeed NanoKVM (pre-2.3.1) exposes a Wi‑Fi configuration endpoint without proper access checks, allowing an unauthenticated attacker with network access to either change the saved Wi‑Fi network to a value of the attacker’s choosing or craft a request to exhaust memory and terminate the KVM proces...

8.8CVSS5.8AI score0.00106EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/03/17 5:19 p.m.21 views

CVE-2026-32296 Sipeed NanoKVM unauthenticated Wi-Fi configuration endpoint

Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate...

8.8CVSS0.00106EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/17 12:0 a.m.2 views

NanoKVM 安全漏洞

NanoKVM is an open-source remote computer control device developed by Sipeed. Versions of NanoKVM prior to 2.3.1 contained security vulnerabilities. These vulnerabilities stemmed from insufficient security checks in Wi-Fi configuration endpoints, which could allow unauthorized attackers to modify...

8.8CVSS6AI score0.00106EPSS
Exploits0References4
Rows per page
Query Builder