Tenda-Smart-Camera-Vulnerability

Tenda-...

CVE-2026-49345

CVE-2026-49345 affects Mercator before 2025.05.19. The SSRF flaw resides in the CVE configuration panel (/admin/config/parameters) where ConfigurationController.testProvider() passes user input directly to curl_init() without validating scheme/host/IP. An authenticated user with configure permiss...

CVE-2026-49345 Mercator CVE Configuration Vulnerable to Server-Side Request Forgery (SSRF)

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery SSRF vulnerability exists in Mercator's CVE configuration panel /admin/config/parameters. The testProvider method in ConfigurationController passes...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via readNEVariables. An attacker can exhaust the JVM heap memory by sending a large number of unique Telnet NEW-ENVIRON variable pairs before the terminating IAC SE byte, resulting in...

GHSA-47QP-HQVX-6R3F JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

Summary The JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option. An unauthenticated attacker can flood the server with a large number of unique variable pairs before sending the terminating IAC SE byte,...

JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

Summary The JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option. An unauthenticated attacker can flood the server with a large number of unique variable pairs before sending the terminating IAC SE byte,...

org.jline:jline-demo (>=4.1.0, <=4.2.0) potentially affected by CVE-2026-56740 via org.jline:jline-remote-telnet (>=4.1.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-56740 Source advisory: GHSA-47QP-HQVX-6R3F...

org.jline:jline-demo (>=4.0.0, <=4.0.15) potentially affected by CVE-2026-56740 via org.jline:jline-remote-telnet (>=4.0.0, <=4.0.15)

org.jline:jline-remote-telnet MAVEN version =4.0.0, =4.0.0, =4.0.15 Source cves: CVE-2026-56740 Source advisory: OSV:GHSA-47QP-HQVX-6R3F...

org.jline:jline-demo (>=4.1.0, <=4.2.0) potentially affected by CVE-2026-56740 via org.jline:jline-remote-telnet (>=4.1.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-56740 Source advisory: OSV:GHSA-47QP-HQVX-6R3F...

org.jline:jline-demo (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-56740 via org.jline:jline-remote-telnet (>=4.0.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.0.0, =4.0.0, =4.2.0 Source cves: CVE-2026-56740 Source advisory: SNYK:JAVA-ORGJLINE-17391829...

org.jline:jline-demo (>=4.1.0, <=4.2.0) potentially affected by CVE-2026-56741 via org.jline:jline-remote-telnet (>=4.1.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-56741 Source advisory: GHSA-2R2C-CX56-8933...

org.jline:jline-demo (>=4.0.0, <=4.0.15) potentially affected by CVE-2026-56741 via org.jline:jline-remote-telnet (>=4.0.0, <=4.0.15)

org.jline:jline-remote-telnet MAVEN version =4.0.0, =4.0.0, =4.0.15 Source cves: CVE-2026-56741 Source advisory: GHSA-2R2C-CX56-8933...

org.jline:jline-demo (>=4.1.0, <=4.2.0) potentially affected by CVE-2026-56741 via org.jline:jline-remote-telnet (>=4.1.0, <=4.2.0)

org.jline:jline-remote-telnet MAVEN version =4.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-56741 Source advisory: SNYK:JAVA-ORGJLINE-17391823...

org.jline:jline-demo (>=4.0.0, <=4.0.15) potentially affected by CVE-2026-56741 via org.jline:jline-remote-telnet (>=4.0.0, <=4.0.15)

org.jline:jline-remote-telnet MAVEN version =4.0.0, =4.0.0, =4.0.15 Source cves: CVE-2026-56741 Source advisory: SNYK:JAVA-ORGJLINE-17391823...

GHSA-2R2C-CX56-8933 JLine3 Telnet server: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

Summary The JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS Negotiate About Window Size option. An unauthenticated remote attacker can send a NAWS subnegotiation advertising a 65535×65535 terminal and repeatedly alternate...

org.jline:jline-demo (>=4.0.0, <=4.0.15) potentially affected by CVE-2026-56741 via org.jline:jline-remote-telnet (>=4.0.0, <=4.0.15)

org.jline:jline-remote-telnet MAVEN version =4.0.0, =4.0.0, =4.0.15 Source cves: CVE-2026-56741 Source advisory: OSV:GHSA-2R2C-CX56-8933...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the TelnetIO.handleNAWS method, which does not check for upper bounds on requested dimensions. An attacker can cause CPU exhaustion by large NAWS Negotiate About Window Size...

JLine3 Telnet server: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

Summary The JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS Negotiate About Window Size option. An unauthenticated remote attacker can send a NAWS subnegotiation advertising a 65535×65535 terminal and repeatedly alternate...

PT-2026-60884

Name of the Vulnerable Software and Affected Versions JLine versions prior to 3.30.14 JLine versions prior to 4.0.16 JLine versions prior to 4.2.1 Description The JLine3 Telnet server remote-telnet module contains a flaw where it does not limit the number of environment variables a client can...

PT-2026-60885

Name of the Vulnerable Software and Affected Versions JLine versions prior to 3.30.14 JLine versions prior to 4.0.16 JLine versions prior to 4.2.1 Description The JLine3 Telnet server remote-telnet module fails to apply an upper bound to terminal dimensions received via the Telnet NAWS option. Th...