26994 matches found
CVE-2026-46425: Missing Authorization
Budibase is an open-source low-code platform. Prior to 3.38.2, packages/worker/src/api/routes/global/scim.ts attaches only two middlewares to the SCIM router: requireSCIM checks the Enterprise feature flag and SCIM config and doInScimContext sets the SCIM request context. There is no role check...
CVE-2026-36539
Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skkget.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi...
PT-2026-43706
Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk get.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi...
CVE-2026-36539
The Netis AC1200 Router NC21 (firmware version V4.0.1.4296 ) is vulnerable to an information disclosure flaw due to an unauthenticated CGI endpoint at /cgi-bin/skk_get.cgi . An attacker residing on the LAN can perform a single HTTP GET request to retrieve the complete router configuration in JSON...
CVE-2026-36539
Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skkget.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi...
CVE-2026-36538
The Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in the /etc/shadow.sample file. The root account uses the trivially weak password root , which allows an attacker with access to the device to authenticate as root. This vulnerability provides the attacker with ...
PT-2026-43707
Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skk set.cgi endpoint. The password and new pwd confirm POST parameters are passed directly to the underlying OS shell without sanitization. An attacker can inject arbitrary shell commands by...
The vulnerability of the formiNICbasic() function in the microprogramming software for routers EDIMAX BR-6478AC allows a hacker to inject arbitrary commands.
The vulnerability of the formiNICbasic function in the microprogramming-based router EDIMAX BR-6478AC lies in the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...
Netis AC1200 安全漏洞
The Netis AC1200 is a series of dual-band wireless broadband routers produced by the Chinese company Netis. The Netis AC1200 V4.0.1.4296 version contains a security vulnerability. This vulnerability stems from the CGI endpoint/cgi-bin/skkget.cgi function, which can return the entire router...
MB Connect Line mbNET和MB Connect Line mbNET.mini 操作系统命令注入漏洞
MB Connect Line mbNET and MB Connect Line mbNET.mini are both products of the German company MB Connect Line. MB Connect Line mbNET is an industrial router. MB Connect Line mbNET.mini is a remote access router. Both MB Connect Line mbNET and MB Connect Line mbNET.mini have operating system comman...
CVE-2026-36538: Use of Hard-coded Credentials
Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying...
The vulnerability of the formiNICSiteSurvey() function in the microprogramming software for EDIMAX BR-6478AC allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formiNICSiteSurvey function in the microprogramming software for EDIMAX BR-6478AC routers lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...
The vulnerability of the formAccept() function in the microprogramming software for routers EDIMAX BR-6478AC allows a hacker to inject arbitrary commands.
The vulnerability of the formAccept function in the microprogramming software for EDIMAX BR-6478AC routers lies in the lack of measures to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...
List of Security Fixes and Improvements in Veeam Recovery Orchestrator
Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Recovery Orchestrator. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases to help the...
Linux Distros Unpatched Vulnerability : CVE-2026-48694
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin. In...
CVE-2026-36540
Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skkset.cgi endpoint. The password and newpwdconfirm POST parameters are passed directly to the underlying OS shell without sanitization. An attacker can inject arbitrary shell commands by...
CVE-2026-9441
A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request Handler. Performing a manipulation of the argument rootAPmac results in command injection. The attack can be initiated...
CVE-2026-9402
A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argument...
CVE-2026-9378
A security flaw has been discovered in Edimax BR-6675nD 1.12. This affects the function formHwSet of the file /goform/formHwSet of the component POST Request Handler. The manipulation of the argument regDomain/ABandregDomain/nic0Addr/nic1Addr/wlanAddr/inicAddr results in command injection. It is...
CVE-2026-9480
A vulnerability was detected in Edimax EW-7438RPn 1.31. The impacted element is the function formrefresh of the file /goform/formrefresh. The manipulation of the argument submit-url results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and...