PT-2026-102475

An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...

CVE-2026-34123

On Tapo C520WS v2, restricted accounts for example, hub users are intended to execute only a limited set of low‑sensitivity operations. Due to a logic flaw in the device’s API authorization mechanism, an attacker can craft requests that leverage legitimate “method mapping” behavior to bypass...

PT-2021-20084

Name of the Vulnerable Software and Affected Versions HMS Ewon eCatcher versions through 6.6.4 Description The issue is related to weak filesystem permissions, which could allow malicious users to access files. This access could lead to sensitive information disclosure, modification of...

CVE-2021-33214: Incorrect Default Permissions

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...