CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

430 matches found

NVD•added 2026/02/26 8:31 p.m.•16 views

CVE-2026-27509

Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 EDU do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programmingactuator/request handled by actuatormanager.py. A network-adjacent, unauthenticated attacker can join DDS domain 0 and publi...

8.5CVSS0.00481EPSS

Exploits1References3

Cisco•added 2026/02/25 4:0 p.m.•27 views

Cisco UCS Manager Software Command Injection Vulnerability

A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with valid administrative privileges to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to...

6.5CVSS6.2AI score0.00444EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:34 a.m.•9 views

CVE-2024-41309

An issue in the Hardware info module of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and gain root-level privileges on the underlying system...

8.4CVSS7.1AI score0.00207EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 8:57 a.m.•8 views

CVE-2023-4149

A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling of the web-based management...

9.8CVSS7.5AI score0.01116EPSS

Exploits0References1

Positive Technologies•added 2025/11/24 12:0 a.m.•10 views

PT-2025-47894

CERT/CC Warns of Unpatched Root-Level Command Injection Flaws in Tenda 4G03 Pro and N300 Routers CVE-2025-13207, CVE-2024-24481 https://t.co/ZUXQixklyd...

7.6AI score

Exploits0References3