CVE-2026-21064

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

CVE-2026-21064

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

CVE-2026-21064

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

PT-2026-69392

Name of the Vulnerable Software and Affected Versions Weaver versions prior to SMR Aug-2026 Release 1 Description Improper access control allows local attackers to cause device inoperability. Recommendations Update to SMR Aug-2026 Release 1...

CVE-2026-21064: Improper Access Control

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

CVE-2025-1070

CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file is downloaded...

EUVD-2025-1981

Malicious code in bioql PyPI...

PT-2025-20724

Name of the Vulnerable Software and Affected Versions Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones versions through 6.4 SP4 R6.4.0.4006 Mitel 6970 Conference Unit versions through 6.4 SP4 R6.4.0.4006 and version V1 R0.1.0 Description A command injection issue exists in Mitel 6800...

CVE-2025-1070

CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file is downloaded...

CVE-2025-1070

CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file is downloaded...

CVE-2025-1070

CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file is downloaded...

CVE-2025-1070

Schneider Electric ASCO 5310 and ASCO 5350 Remote Annunciators are affected by CVE-2025-1070 (CWE-434): Unrestricted Upload of File with Dangerous Type, which could render the device inoperable when a malicious file is downloaded. The issue is described across multiple sources (Red Hat, NVD, CNNV...

CVE-2025-1058

CVE-2025-1058 affects Schneider Electric ASCO 5310 and ASCO 5350 Remote Annunciator products. The issue is CWE-494: downloading code without integrity checks, which could render the device inoperable if malicious firmware is downloaded. Additional disclosures (CWE-770, CWE-319, CWE-434) appear in...