650 matches found
CVE-2026-49005
The root password hash of the device can be obtained through unencrypted information in the firmware...
Rockwell Automation 1715-AENTR EtherNet/IP Adapter
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device. 2. RECOMMENDED PRACTICES CISA recommends users...
CVE-2026-12352 Incorrect Authorization
This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device...
Upwind Security Brings AI Visibility to the Endpoint, Unifying Cloud and Device Security
Upwind’s AI Sensor links endpoint activity with cloud context, helping teams track MCP connections, AI actions, identities and developer risk in one view today...
CVE-2026-50084
CVE-2026-50084 concerns the Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api), where any valid developer token could access any account due to missing authorization (CWE-862). The CVSSv3.1 base score is 9.6 (CRITICAL): Network-based, Low attack complexity, Privileges Required: Low, Use...
vulnerability-research
Vulnerability Research & Responsible Disclosure Shivam Paji...
ZTE ZXHN-F660T/F660A - Default Credentials
ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge of the credential, an attacker may log in to the affected devices. id: CVE-2025-53558 info: name: ZTE ZXHN-F660T/F660A - Default Credentials author: DhiyaneshDK severity: high...
CVE-2026-28551
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-9814
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28551
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28551
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28551
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28551
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28551
Technical details about CVE-2026-28551 are not publicly available in the provided documents. No affected products, components, root cause, exploit information, or fixes are disclosed. Monitor for updates.
CVE-2026-28551: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-23433
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-27753 SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate Limiting
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface. Attackers can conduct online password guessing attacks without account lockout or rate...
CVE-2023-43885
Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the device...