CVE-2023-52235-PoC-SPACEX-STARLINK-DNS-Rebinding

https://hackintoanetwork.com/blog/2023-starlink-dns-rebinding-attack-eng...

CVE-2026-19918: Improper Access Control

A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function getstatus of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...

CVE-2026-19918

SpaceX Starlink Router Gen 3 (version 2025.11.14.mr64708.3) contains a vulnerability in the gRPC Management Interface get_status function. The issue is improper access controls, allowing an adjacent-network attacker to exploit it with no user interaction. Exploit maturity is listed as Proof-of-Co...

CVE-2025-67780: Missing Authentication for Critical Function

SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 e.g., on Mini1prod2 allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. In some cases, an attacker's ability to read tilt, rotation,...

EUVD-2023-56908

Malicious code in bioql PyPI...

SpaceX Starlink Wi-Fi router 安全漏洞

The SpaceX Starlink Wi-Fi router is a series of routers from SpaceX in the United States. A security vulnerability exists in SpaceX Starlink Wi-Fi router Gen 2 prior to version 2023.48.0, which originated from allowing cross-site scripting attacks via the ssid and password parameters on the...