Lucene search
+L

3774 matches found

NVD
NVD
added 2026/03/16 2:19 p.m.12 views

CVE-2026-3562

Philips Hue Bridge hkhap Ed25519 Signature Verification Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific...

8.8CVSS0.0029EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/16 2:18 p.m.21 views

CVE-2026-21004

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service...

6.9CVSS0.00185EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/16 4:35 a.m.6 views

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege...

7.1CVSS5.9AI score0.00235EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/16 4:35 a.m.38 views

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege...

7.1CVSS0.00235EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/16 4:35 a.m.6 views

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege...

7.1CVSS5.9AI score0.00235EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/16 4:35 a.m.6 views

CVE-2026-21004

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service...

6.9CVSS5.8AI score0.00185EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/16 4:35 a.m.40 views

CVE-2026-21004

Observation: CVE-2026-21004 is a reserved candidate entry. The connected document EUVD-2026-12323 describes an issue in Smart Switch with improper authentication prior to version 3.7.69.15 , which allows adjacent attackers to trigger a denial of service . What is affected: Smart Switch devices ru...

6.9CVSS5.8AI score0.00185EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/16 12:00 a.m.15 views

PT-2026-25608

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service...

6.9CVSS5.8AI score0.00185EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/16 12:00 a.m.40 views

(Pwn2Own) ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OCPP messages. The issue results from the la...

7.5CVSS6.3AI score0.00425EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/03/13 8:37 p.m.5 views

CVE-2026-3562 Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability

Philips Hue Bridge hkhap Ed25519 Signature Verification Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific...

6.3CVSS7AI score0.0029EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 8:36 p.m.6 views

CVE-2026-3559 Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability

Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific...

8.1CVSS7.3AI score0.00396EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 8:36 p.m.7 views

CVE-2026-3559

Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific...

8.1CVSS5.9AI score0.00396EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/03/11 6:30 p.m.20 views

EUVD-2026-11219

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS5.8AI score0.0016EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/11 5:16 p.m.17 views

CVE-2026-20074

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS0.0016EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/11 4:31 p.m.9 views

CVE-2026-20074

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS5.8AI score0.0016EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/11 4:31 p.m.42 views

CVE-2026-20074 Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS0.0016EPSS
SaveExploits0References1
Cisco
Cisco
added 2026/03/11 4:00 p.m.36 views

Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS5.8AI score0.0016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/11 12:00 a.m.26 views

PT-2026-24730

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A flaw exists in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature that could allow a nearby, unauthenticated attacker to unexpectedly restart...

7.4CVSS7AI score0.0016EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/03/10 6:31 p.m.10 views

EUVD-2026-10661

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS6.1AI score0.00552EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/10 5:04 p.m.6 views

CVE-2026-25188

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS6.1AI score0.00552EPSS
SaveExploits0References2Affected Software21
Rows per page
Query Builder