CVE-2026-120286

A Missing Authorization vulnerability in nerves_hub_web (versions 1.0.0 before 2.5.3) allows authenticated members with the view role to perform actions reserved for the manage role. The root cause is that specific LiveView event handlers—including those for certificate management, tag manipulati...

EEF-CVE-2026-120286 Missing authorization in device and deployment group page events allows view-role members to change devices and deployment groups

Summary Missing Authorization vulnerability in the device and deployment group pages in nerves-hub nerveshubweb allows an authenticated organization member with the view role to change devices and deployment groups via LiveView events reserved for the manage role. The event handlers that add and...

attezt

attezt attezt is a suite of remote attestation tools. It provides several components that allows Linux systems to have hardware backed device certificates over the device-attest-01 ACME challenge. This is useful for environments where you want a strong device identity claim for things like x509...

Siemens SICAM TOOLBOX II Trust Management Issue Vulnerability (CNVD-2025-16621)

Siemens SICAM TOOLBOX II is an engineering software from Siemens, Germany. A trust management issue vulnerability exists in Siemens SICAM TOOLBOX II that stems from a common name not being checked for device certificates, which could be exploited by an attacker to cause a man-in-the-middle attack...

PcVue security vulnerabilities

PcVue is a reliable, secure, and robust operational software platform from PcVue, Inc. dedicated to monitoring and controlling applications in markets such as building and campus management. A security vulnerability exists in PcVue that stems from the MQTT component failing to validate the validi...

Palo Alto Networks PAN-OS Trust Management Issues Vulnerability

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. Palo Alto Networks PAN-OS is vulnerable to a trust management issue that arises from the use of weak low bit strength device certificates. An attacker could exploit this vulnerability to perform a...

Palo Alto Networks Panorama security vulnerability

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. Palo Alto Networks PAN-OS is vulnerable to a trust management issue that arises from the use of weak low bit strength device certificates. An attacker could exploit this vulnerability to perform a...

Multiple Huawei products insecure random number generation vulnerability

Huawei S7700 and others are intelligent routing switches from Huawei China. An insecure random number generation vulnerability exists in multiple Huawei products. An attacker can exploit the vulnerability to take control of a flawed device certificate and obtain a private key...