The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

CVE-2026-21555

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

EUVD-2026-52235

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21554

Technical details (affected product, version, root cause, and fix) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-21553

CVE-2026-21553 affects the modem component. The issue is improper input validation that could enable remote denial of service without additional privileges. Base CVSS 3.1 score 7.5 (HIGH); attack vector NETWORK, complexity LOW, privileges NONE, user interaction NONE. No specific vendor/product ve...

CVE-2026-21552

The CVE-2026-21552 entry describes a vulnerability in the modem component where improper input validation could allow a remote denial of service without extra privileges. The impact is rated high (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) with network access and no user interaction required...

EUVD-2026-52233

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

EUVD-2026-52232

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

EUVD-2026-52231

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

EUVD-2026-52230

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21548

CVE-2026-21548 is confirmed in the connected records as a flaw in the nr modem arising from improper input validation, which could enable remote denial of service with system execution privileges required. The issue is described with network access, no user interaction, and no privileges required...

EUVD-2026-52229

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed...

System Dashboard < 2.8.15 - Admin+ Path Traversal

The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitrary files on the server id: CVE-2024-10708 info: name: System Dashboard 2.8.15 - Admin+ Path...

KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

Coda v.2024Q1 - Cross-Site Scripting

Cross Site Scripting vulnerability in Unit4 Financials by Coda v.2024Q1 allows a remote attacker to escalate privileges via a crafted script to the cols parameter. id: CVE-2024-28734 info: name: Coda v.2024Q1 - Cross-Site Scripting author: s4e-io severity: medium description: | Cross Site Scripti...

Limit Login Attempts - Stored Cross-Site Scripting

Limit Login Attempts WordPress plugin 4.0.72 contains a stored cross-site scripting caused by unsanitized and unescaped settings, letting malicious administrators inject Javascript code, exploit requires administrator privileges. id: CVE-2022-1029 info: name: Limit Login Attempts - Stored...

Cisco IOS XE WLC - Arbitrary File Upload

A vulnerability in the Out-of-Band Access Point AP Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.This vulnerability is due to the presence of a hard-coded JSON Web...

EUVD-2026-52085

In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296...

CVE-2026-20494

CVE-2026-20494 affects a wifi component with an out-of-bounds read due to a missing bounds check, enabling local information disclosure when the attacker already has System privileges. No user interaction required. Affected patch IDs include ALPS10960006 and BORA00155314, BORA00155001, BORA001549...

EUVD-2026-52083

In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: BORA00154903; Issue ID: MSV-7575...