CVE-2025-45467

CVE-2025-45467: Insecure Firmware Verification in Unitree Go1 Summary A critical vulnerability CVE-2025-45467 has been discovered in Unitree Go1 robotic dog all firmware versions ≤ Go120220511, where the firmware update mechanism relies solely on insecure MD5 hash checks for integrity verificatio...

CVE-2026-102166

Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verification and SSLP authentication. An attacker who is able to access these keys would be able to create modified firmware that will pass verification checks. This vulnerability is specif...

epson-eh-tw5350-advisories

Epson EH-TW5350 — CVE-2021-43716, CVE-2021-43717, CVE-2021-43718 Three vulnerabilities discovered in the Epson EH-TW5350 projector firmware 150075647YWWV110 by team B-BEAM-BOB during the KITRI Best of the Best BoB program, 2021. CVE IDs were assigned by MITRE on 2021-12-21 but the records remaine...

EUVD-2026-122904

Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verification and SSLP authentication. An attacker who is able to access these keys would be able to create modified firmware that will pass verification checks. This vulnerability is specif...

CVE-2026-102166

Arista C-260 and C-250 access points are vulnerable because they ship with fleet-wide static cryptographic keys . These keys are utilized for firmware image verification and SSLP authentication . If an attacker obtains these keys, they can create modified firmware that successfully passes verific...

PT-2026-144590

Name of the Vulnerable Software and Affected Versions Arista C-260 affected versions not specified Arista C-250 affected versions not specified Description Arista C-260 and C-250 access points use fleet-wide static cryptographic keys for SSLP authentication and firmware image verification. An...

CVE-2026-55981

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device...

CVE-2026-55981 Firmware verification vulnerability

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device...

CVE-2026-55981

A firmware verification vulnerability exists in the Creative Sound Blaster Katana . This flaw could enable an attacker to modify a legitimate firmware image and successfully upload the compromised firmware to an affected device. The vulnerability is assigned a CRITICAL base severity score of 9.6 ...

EUVD-2026-108606

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device...

CVE-2026-55981 Firmware verification vulnerability

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device...

PT-2026-121779

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device...

CVE-2026-65197 H3C G3/G5 HDM Firmware Verification Key Replacement

H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file /conf/public.pem. That file is writable by an authenticated Redfish client through the UpdateService.UploadSignKey action, which stores the uploaded body verbatim after validating...

CVE-2026-65197

H3C HDM Family-A (specifically G3/G5 builds carrying the Redfish/DRE update tree, such as version 6.14.01 ) is vulnerable to a firmware verification key replacement. The UpdateService.UploadSignKey action allows an authenticated Redfish client to write to the mutable file /conf/public.pem by only...

CVE-2026-73177

Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without...

CVE-2026-11835

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

PT-2026-66672

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A command injection flaw exists during the firmware upgrade file verification process. Successful exploitation allows an attacker to execute arbitrary commands ...

CVE-2026-44103 JupiCore does not perform validation of firmware

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

CVE-2026-5818

Incorrect check of function return value in Caliptra Core Runtime Firmware ActivateFirmwareCmd::activatefw modules allows bypass of Caliptra Core's verification of the MCU FW during a hitless update. This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0...

CVE-2026-5818

Incorrect check of function return value in Caliptra Core Runtime Firmware ActivateFirmwareCmd::activatefw modules allows bypass of Caliptra Core's verification of the MCU FW during a hitless update. This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0...