CVE-2026-101104 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering...

CVE-2026-62659 Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points

A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings...

PT-2024-30649

Name of the Vulnerable Software and Affected Versions TAKENAKA ENGINEERING CO., LTD. digital video recorders affected versions not specified Description The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings. This is an OS...

PT-2024-32334

Name of the Vulnerable Software and Affected Versions TAKENAKA ENGINEERING CO., LTD. digital video recorders affected versions not specified Description The issue concerns a hidden functionality problem in digital video recorders. This problem allows a remote authenticated attacker to execute an...

PT-2022-27264 · Unknown · Udr-Ja1608 +2

Name of the Vulnerable Software and Affected Versions: UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier Description: The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings due to an improper...

PT-2021-14111

Name of the Vulnerable Software and Affected Versions: ELECOM NCC-EWF100RMWH2 affected versions not specified Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via an unspecified vector. Thi...

WAGO Ethernet controller Auth Bypass

The vulnerability of the WAGO Ethernet controller is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to alter the device’s settings using a specially crafted request...

PT-2020-18591

Name of the Vulnerable Software and Affected Versions NETGEAR switching hubs GS716Tv2 versions 5.4.2.30 and earlier NETGEAR switching hubs GS724Tv3 versions 5.4.2.30 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of...

CVE-2019-16731

The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings...

PT-2019-14799

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to initiate firmware upgrades and alter device settings through the udpServerSys service. Recommendations For Petwant PF-103...

Siveillance VMS Access Control

The vulnerability of the Siveillance VMS software platform relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to alter device settings using a web service...