CVE-2026-25811

CVE-2026-25811 affects PlaciPy 1.0.0. Root cause: tenant identifiers are derived from user email domains without validating domain ownership/registration, enabling cross-tenant data access. Impact is cross-tenant data exposure; CVSS notes indicate high confidentiality/integrity impact in some vec...

The vulnerability of the tcpcheck_net function in the microprogramming software of the TOTOLink T6 system allows a intruder to execute arbitrary code.

The vulnerability of the tcpchecknet function in the microprogramming software of the TOTOLink T6 mesh system arises from the lack of measures taken at the control level during the processing of the domain parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by...