CVE-2026-95862

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-77558

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

EUVD-2026-84754

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-95861: Uncontrolled Recursion

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-95862: Out-of-bounds Write

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

The vulnerability of the microprogrammed software of Zyxel ATP, USG FLEX, and USG FLEX 50(W)/USG20(W)-VPN lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the microprogrammed software in Zyxel ATP, USG FLEX, and USG FLEX 50W/USG20W-VPN devices is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2026-25312

CVE-2025-13778 Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-… https://t.co/s08dPDmnD8...

CVE-2025-59968

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface. Tampering with this metadata can result in managed SRX Series devices permitting network traffic that...

CVE-2025-59968 Junos Space Security Director: Insufficient authorization for sensitive resources in web interface

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface. Tampering with this metadata can result in managed SRX Series devices permitting network traffic that...

Pepperl+Fuchs ICDM-RX 跨站脚本漏洞

The Pepperl+Fuchs ICDM-RX is a series of gateway devices from Pepperl+Fuchs Germany. A cross-site scripting vulnerability exists in the Pepperl+Fuchs ICDM-RX. An attacker could exploit this vulnerability to obtain information from a user or reboot the affected device once...

Pepperl+Fuchs ICDM-RX 跨站脚本漏洞

The Pepperl+Fuchs ICDM-RX is a series of gateway devices from Pepperl+Fuchs Germany. A cross-site scripting vulnerability exists in the Pepperl+Fuchs ICDM-RX. An attacker can exploit this vulnerability to inject malicious HTML code and gain low-privilege access on the affected device...

CVE-2023-27917

OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute arbitrary OS commands with a root privilege. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 a...

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway network devices allows a perpetrator to cause a service outage.

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway networking devices is related to errors during the processing of a missing parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the Common Gateway Interface (CGI) interface of microprogrammed network devices such as ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN allows attackers to gain unauthorized access to protected information.

The vulnerability of the Common Gateway Interface CGI interface of microprogrammed network devices such as ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor, operating...

CVE-2021-40517

Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access...

CVE-2021-40521

Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution...

CVE-2021-40519

Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials...

CVE-2021-40519

Airangel HSMX Gateway devices prior to version 5.2.04 have hard-coded PostgreSQL database credentials embedded in the configuration file, according to multiple sources. This root cause allows an attacker to connect to the HSMX database over the network, potentially enabling unauthorized access to...

CVE-2021-22411

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service...

CVE-2021-0235

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...