MINI-MH3P-WCG2-R3G7

Bulletin has no description...

MINI-F245-3PW2-FGPG

Bulletin has no description...

MINI-M44R-FPG8-3V39

Bulletin has no description...

MINI-4PM2-8RM5-863Q

Bulletin has no description...

MINI-84MR-4MW6-55VJ

Bulletin has no description...

MINI-C8XM-V5P3-Q482

Bulletin has no description...

MINI-MQ5R-HF7R-M4W3

Bulletin has no description...

MINI-Q86C-36PG-XJQR

Bulletin has no description...

MINI-36VF-C3MX-VRRG

Bulletin has no description...

MINI-P833-PWM8-HQJC

Bulletin has no description...

MINI-X8Q5-8M3X-3W5J

Bulletin has no description...

MINI-5MP5-7M64-MRQM

Bulletin has no description...

MINI-225G-4GJW-V5XP

Bulletin has no description...

CVE-2025-70994

Yadea T5 Electric Bicycles models manufactured in/after 2024 have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF protocol without implementing rolling codes or cryptographic challenge-response mechanisms. This is vulnerable to signal...

CVE-2026-49318

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...

CVE-2026-5171

Improper access control in the entry activity log feature in Devolutions Server allows an authenticated user with access to an entry but without the required permission to retrieve that entry's activity logs via a crafted API request. This issue affects : Devolutions Server 2026.1.6.0 through...

CVE-2026-9248

Authorization bypass in the entry duplication feature in Devolutions Server allows an authenticated user with write access to any vault to copy documentation and attachments from an entry in a vault they cannot access via a crafted save request. This issue affects : Devolutions Server 2026.1.6.0...

CVE-2026-9590

Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user with entry edit privileges to modify asset information without the required permission...

CVE-2026-9247

Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal notification to administrators via a crafted export request. This issue affects : Devolutions Server 2026.1.6.0 throug...

CVE-2026-8477

Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data without triggering the unseal audit notification via a crafted API request. This issue...