CVE-2026-102369 Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200

Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An unauthenticated attacker on the same local network can replay login challenge data to obtain an administrative session, enable a privileged service th...

CVE-2026-102369 Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200

Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An unauthenticated attacker on the same local network can replay login challenge data to obtain an administrative session, enable a privileged service th...

CVE-2026-78577

The Tapo C120 v1 and C200 V5 security cameras are vulnerable to an information disclosure flaw in the HTTPS onboarding scan function . Due to missing authentication , an unauthenticated attacker residing on the same local network can trigger the scan to retrieve metadata from nearby wireless acce...

CVE-2026-78577 Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200

Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an unauthenticated attacker on the same local network can invoke the scan action and retrieve nearby wireless access-point metadata, including SSIDs, BSSIDs,...

EUVD-2026-90980

Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup and does not validate that a password field is present for certain authentication and encryption parameter combinations...

CVE-2026-9032

The Tapo C120 v1 and C200 v5 cameras are vulnerable to a NULL pointer dereference within the HTTPS onboarding connect request parser. The flaw exists because the interface—accessible without authentication after initial setup—fails to validate the presence of a password field for specific authent...

CVE-2026-9032 Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200

Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup and does not validate that a password field is present for certain authentication and encryption parameter combinations...

CVE-2026-95341

An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523719002...

CVE-2026-95376

An externally controlled reference flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513134076...

CVE-2026-95276

An improper input validation flaw was found in the Themes component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517730821...

CVE-2026-53715

A flaw was found in Envoy Gateway. Improper synchronization in the Wasm cache handling allows an attacker with pod-network access and tenant permissions to trigger a race condition. By flooding GET requests, an attacker can cause a read-write overlap, leading to the termination of the controller...

Home Assistant: mDNS Server-Side Request Forgery

SummaryHome Assistant Green is vulnerable to a Server-Side Request Forgery SSRF via the mDNS/Zeroconf IPP integration. An unauthenticated attacker on the local network can send a crafted mDNS response to trick Home Assistant into making HTTP requests to arbitrary hosts, including internal service...

PYSEC-2026-4051 Home Assistant: mDNS Server-Side Request Forgery

Summary Home Assistant Green is vulnerable to a Server-Side Request Forgery SSRF via the mDNS/Zeroconf IPP integration. An unauthenticated attacker on the local network can send a crafted mDNS response to trick Home Assistant into making HTTP requests to arbitrary hosts, including internal servic...

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

ImpactOpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations.An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

PYSEC-2026-4130 OpenCVE: Server-Side Request Forgery (SSRF) in notifications

Impact OpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations. An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

Routeglass

Routeglass - High speed Router & Network Appliance Fingerprinting Tool Routeglass is a fast, multi-threaded router fingerprinting tool written in Go. The goal of the project is simple: identify web-exposed routers, firewalls, gateways, and embedded network devices by fingerprinting HTTP responses...

CVE-2026-67105

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

EUVD-2026-90876

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...