Lucene search
+L

69481 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-89207: Improper Validation of Specified Type of Input

A vulnerability has been identified in WTV676-HB6035 Web Interface All versions V3.94, WTV776-HB6035 Web Interface All versions V4.17. Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into...

6.9CVSS5.7AI score0.00433EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-73165: Improper Neutralization of Special Elements used in an OS Command

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

8.6CVSS6.5AI score0.01175EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-73163: Improper Neutralization of Special Elements used in an OS Command

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

8.6CVSS6.5AI score0.01175EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-73447: Improper Neutralization of Special Elements used in an OS Command

A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Network Security Interface gNSI Certz service on Arista EOS-based products to escalate privileges and execute arbitrary...

9.4CVSS6.3AI score0.00705EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•22 views

PT-2026-93362

A vulnerability has been identified in WTV676-HB6035 Web Interface All versions V3.94, WTV776-HB6035 Web Interface All versions V4.17. Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into...

6.9CVSS5.7AI score0.00433EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•1 views

CVE-2026-73171: External Control of File Name or Path

Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a...

8.6CVSS6.1AI score0.00518EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-89825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: fix firmware control interface bounds checks panthorinitcsiface and panthorinitcsgiface validate firmware control interface offsets with 32-bit...

7.8CVSS5.9AI score0.00175EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-73454: Improper Neutralization of Special Elements used in a Command

On affected platforms running Arista EOS with gRPC Network Security Interface gNSI Credentialz configured, a specially crafted request can cause unintended modifications to the target account's properties. This may result in the account being assigned elevated privileges or access beyond what an...

8.6CVSS5.8AI score0.00392EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-73167: Improper Neutralization of Special Elements used in an OS Command

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

8.6CVSS6.5AI score0.01175EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•2 views

CVE-2026-73176: Improper Neutralization of Special Elements used in an OS Command

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

8.6CVSS6.5AI score0.01175EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-73164: Improper Neutralization of Special Elements used in an OS Command

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

8.6CVSS6.5AI score0.01175EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-89948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbone...

5.8AI score0.00211EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•1 views

CVE-2026-76438: Incorrect Authorization

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

6.5CVSS5.9AI score0.00558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•1 views

CVE-2026-89825: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: fix firmware control interface bounds checks panthorinitcsiface and panthorinitcsgiface validate firmware control interface offsets with 32-bit arithmetic and the size of the host wrapper structures. The offsets are...

7.8CVSS5.9AI score0.00175EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-76431: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected device. To exploit this vulnerability, the attacker must have valid...

4.9CVSS6AI score0.01215EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-73445: Improper Input Validation

On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface gNSI Authz Rotate RPC may cause an incorrect Authz policy which was uploaded in the ongoing RPC stream to become active. This does not affect Bootz. This issue was discovered internally by Arista and the...

6.9CVSS5.8AI score0.0035EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2026/09/16 12:00 a.m.•34 views

VulnCheck KEV: CVE-2026-76460

Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface...

10CVSS8.5AI score0.14026EPSS
SaveIn wildExploits0References3
CISA KEV Catalog
CISA KEV Catalog
•added 2026/09/16 12:00 a.m.•23 views

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface...

10CVSS8.5AI score0.14026EPSS
SaveIn wildExploits0
Cvelist
Cvelist
•added 2026/09/15 11:08 p.m.•37 views

CVE-2026-73446 Security Advisory 0160

On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...

7.4CVSS0.00265EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/15 11:08 p.m.•14 views

CVE-2026-73446 Security Advisory 0160

On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...

7.4CVSS5.8AI score0.00265EPSS
SaveExploits0References1
Rows per page
Query Builder