CVE-2023-33768

CVE-2023-33768 説明 Belkin Wemo Smart Plug WSP080 v1.2 のデバイス ファームウェア更新プロセス中のファームウェアの署名検証の不備により、 攻撃者は細工されたファームウェアファイルを介して サービス拒否 DoS を引き起こすことができます。 追加情報 Wemo スマートプラグをモバイルアプリ経由でファームウェア更新する際、スマートプラグのファームウェアバイナリのファームウェア署名が無効な場合、Wemo スマートプラグが応答しなくなる（文鎮化する）可能性があることを発見しました。 Wemo Android アプリ...

the-key-ships-with-the-lock-cve-2026-82876-phison-s11-ssd-firmware-signature-bypass

CVE-2026-82876 — Phison S11 SSD 固件签名验证绕过（PoC） 针对 CVE-2026-82876 （CVSS 3.1：8.2 高危 / CVSS 4.0：9.3 严重，CWE-347）的概念验证：Phison PS3111-S11 SATA SSD 控制器在验证固件更新 RSA 签名时，使用的是固件镜像自身内部嵌入的公共模数 ，而非锚定在不可变控制器存储中的模数。任何人都可以生成自己的 RSA 密钥对，对修改后的固件重新签名，嵌入匹配的模数——所有基于 S11 的驱动器都会将篡改后的镜像视为正品。 配套公告：CVE-2026-84696...

CVE-2023-33768

CVE-2023-33768 説明 Belkin Wemo Smart Plug WSP080 v1.2 のデバイスファームウェア更新プロセス中におけるファームウェアの署名検証の不備により、攻撃者が細工されたファームウェアファイルを介してサービス拒否 DoS を引き起こす可能性があります。 追加情報 Wemo スマートプラグのファームウェアをモバイルアプリ経由で更新する際、スマートプラグのファームウェアバイナリの署名が無効な場合、Wemo スマートプラグが応答を停止する（文鎮化する）ことが判明しました。 Wemo Android アプリ com.belkin.wemoandroid...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-76852

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtdwrite allowing forged firmware authenticity checks. Attackers can exploit putfile.cgi and checkimageuuid.c to bypass firmware signature validation and load unauthorized firmware images...

PT-2026-93186

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd write allowing forged firmware authenticity checks. Attackers can exploit put file.cgi and check image uuid.c to bypass firmware signature validation and load unauthorized firmware images...

CVE-2026-82876 Phison PS3111-S11 Controller Firmware Signature Verification Bypass

Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the...

Exploit for Inefficient Regular Expression Complexity in Securly

--- CVE-2026-8888 – Printer Firmware Unsigned Update via HTT...

CVE-2026-44104 ControllerAgent does not perform validation of firmware

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...

DEBIAN-CVE-2026-64237

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

EUVD-2026-48646

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

CVE-2026-64237 Input: elan_i2c - validate firmware size before use

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

Vulnerabilities in Siemens SICORE

Siemens has identified vulnerabilities in the SICORE Base system, particularly in versions under V26.20. These vulnerabilities are located in several components of the CPCI85 and SICORE Base systems. One of these vulnerabilities allows an authenticated attacker to crash the web service through an...

CVE-2026-54799

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install...

EUVD-2026-30673

Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...

PT-2025-51840

Name of the Vulnerable Software and Affected Versions Netun Solutions HelpFlash IoT version v18 178 221102 ASCII PRO 1R5 50 Description The over-the-air OTA firmware update process in the software does not properly authenticate update servers or validate firmware signatures, and relies on...

CVE-2025-65855

The OTA firmware update mechanism in Netun Solutions HelpFlash IoT firmware v18178221102ASCIIPRO1R550 uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mod...

CVE-2025-36747

ShineLan-X contains a set of credentials for an FTP server was found within the firmware, allowing testers to establish an insecure FTP connection with the server. This may allow an attacker to replace legitimate files being deployed to devices with their own malicious versions, since the firmwar...

D-Link DAP-2695 数据伪造问题漏洞

The D-Link DAP-2695 is a high-performance dual-band wireless access point from China AUO D-Link. A data forgery issue vulnerability exists in the D-Link DAP-2695 version 2.00RC13, which stems from the function sub40C6B8 in the Firmware Update Handler component not properly verifying the...