248847 matches found
EUVD-2026-51040
A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...
EUVD-2026-51039
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...
CVE-2026-44104
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...
CVE-2026-44104
The CVE-2026-44104 entry describes a vulnerability in the basemodule firmware update process of the charging controller, where only a CRC32 checksum is validated and no cryptographic signature verification is performed. Root cause: lack of signature verification allows an unauthenticated remote a...
CVE-2026-44104 ControllerAgent does not perform validation of firmware
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...
CVE-2026-44099
CVE-2026-44099 is a local privilege escalation. Connected sources describe a vulnerability enabling a low-privilege local user to gain root privileges via manipulation of system configuration, specifically cited as Local Privilege Escalation via pppd password injection. The NVD entry reiterates t...
CVE-2026-44099 Local Privilege Escalation via pppd password injection
A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...
EUVD-2026-51034
A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...
CVE-2026-44099
A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...
EUVD-2026-51033
This vulnerability allows an unauthenticated remote attacker with control over the OCPP backend via firewall-bypass to perform an OS command injection, resulting in the execution of arbitrary commands as the limited user charx-oa. Charging could be interrupted...
CVE-2026-44096 udhcpc Privilege Escalation
A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...
EUVD-2026-51031
A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...
CVE-2026-44095
CVE-2026-44095 is described as a local privilege escalation affecting a script used for network configuration. A low-privileged local user can execute arbitrary commands as root, leading to full system compromise. The CVSS metrics indicate high impact on confidentiality, integrity, and availabili...
CVE-2026-44095
A privilege escalation vulnerability in a script used for network configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...
EUVD-2026-51028
A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...
CVE-2026-44092 Missing input validation / stripping of CRLF characters in SystemConfigManager
An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss...
EUVD-2026-51026
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...
CVE-2026-44091
CVE-2026-44091 describes an unauthenticated remote attacker who can post a malicious ID to the MQTT Broker, causing the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss. The published CVSS metrics indicate a high severity: CVSS 4....
CVE-2026-16527
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover...
UBUNTU-CVE-2026-16527
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover...