Lucene search
+L

538 matches found

NVD
NVD
•added 2026/09/28 9:17 p.m.•14 views

CVE-2026-101187

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

9.4CVSS0.02336EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/28 8:45 p.m.•39 views

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

9.4CVSS0.02336EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/28 8:45 p.m.•20 views

CVE-2026-101187

A command injection vulnerability exists in the USB Device Management API of Ziroom ZHOME A0101 version 1.0.1.0. The flaw is located in the pop_usb_device function within the file usr/lib/lua/luci/controller/api/zrUsb.lua. By manipulating the argument path, an attacker can execute arbitrary comma...

9.4CVSS7.9AI score0.02336EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/28 8:45 p.m.•13 views

EUVD-2026-88546

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

9.4CVSS7.9AI score0.02336EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/28 8:45 p.m.•11 views

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

9.4CVSS5.8AI score0.02336EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•6 views

PT-2026-102358

Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description An issue exists in the USB Device Management API within the file usr/lib/lua/luci/controller/api/zrUsb.lua. A remote attacker can perform command injection by manipulating the path argument passed...

9.4CVSS6.6AI score0.02336EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•12 views

CVE-2026-101187: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

9.4CVSS5.8AI score0.02336EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/09/25 5:17 p.m.•27 views

DEBIAN-CVE-2026-66073

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6.5CVSS5.7AI score0.00406EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2026/09/25 5:17 p.m.•21 views

AZL-105302 CVE-2026-66073 affecting package rabbitmq-server 3.13.7-9

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6.5CVSS5.7AI score0.00406EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/25 5:17 p.m.•17 views

CVE-2026-66073

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6.5CVSS0.00406EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2026/09/25 5:17 p.m.•21 views

UBUNTU-CVE-2026-66073

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6.5CVSS5.7AI score0.00406EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2026/09/25 5:17 p.m.•18 views

CVE-2026-66073

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6.5CVSS5.7AI score0.00406EPSS
SaveExploits1References4
Mend
Mend
•added 2026/09/25 4:06 p.m.•10 views

CVE-2026-66073

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6.5CVSS5.7AI score0.00406EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/09/25 4:06 p.m.•18 views

CVE-2026-66073 RabbitMQ: Atom table exhaustion via management API node field

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6CVSS5.7AI score0.00406EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/09/25 4:06 p.m.•19 views

EUVD-2026-87149

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6CVSS5.7AI score0.00406EPSS
SaveExploits1References3
CVE
CVE
•added 2026/09/25 4:06 p.m.•31 views

CVE-2026-66073

RabbitMQ versions 3.13.0 to 3.13.14 , 4.0.19 , 4.1.10 , and 4.2.5 are vulnerable to Atom table exhaustion via the management API. The issue occurs because the PUT /api/queues/:vhost/:name (along with exchanges and bindings endpoints) accepts a node JSON field that passes through rabbitnodes:make ...

6.5CVSS5.7AI score0.00406EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2026/09/25 4:06 p.m.•52 views

CVE-2026-66073 RabbitMQ: Atom table exhaustion via management API node field

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6CVSS0.00406EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/09/25 4:06 p.m.•18 views

CVE-2026-66073 RabbitMQ: Atom table exhaustion via management API node field

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6CVSS5.7AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•14 views

CVE-2026-66073: Uncontrolled Resource Consumption

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

6.5CVSS5.7AI score0.00406EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-66073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pU...

6.5CVSS5.7AI score0.00406EPSS
SaveExploits1References3
Rows per page
Query Builder