CVE-2026-32291 GL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial console

The GL-iNet Comet GL-RM1 KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically opening the device and connecting to the UART pins...

CVE-2026-32291: Missing Authentication for Critical Function

The GL-iNet Comet GL-RM1 KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically opening the device and connecting to the UART pins...

CVE-2025-60856: Missing Authentication for Critical Function

Reolink Video Doorbell WiFi DB566128M5MPW allows root shell access through an unsecured UART/serial console. An attacker with physical access can connect to the exposed interface and execute arbitrary commands with root privileges. NOTE: this is disputed by the Supplier because of "certain...

PT-2025-42786

Name of the Vulnerable Software and Affected Versions Reolink Video Doorbell WiFi DB 566128M5MP W affected versions not specified Description The Reolink Video Doorbell WiFi DB 566128M5MP W allows root shell access through an unsecured UART/serial console. An attacker with physical access can...