EUVD-2026-116194

A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged attacker to obtain certain sensitive information stored on the affected system...

EUVD-2026-116182

A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information...

CVE-2026-95777

A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged attacker to obtain certain sensitive information stored on the affected system...

CVE-2026-95765

A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information...

CVE-2026-95777

A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer . A low-privileged attacker could successfully exploit this vulnerability to obtain sensitive information stored on the affected system. No specific root cause, affected versions,...

CVE-2026-95765

A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric Composer . This flaw could allow an unauthenticated remote attacker to obtain sensitive information. No specific root cause, affected versions, or remediation details are provide...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

Progress Kemp LoadMaster - Command Injection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. id: CVE-2024-1212 info: name: Progress Kemp LoadMaster - Command Injection author: DhiyaneshDK severity: critical description: | Unauthenticated remote...

FatPipe WARP/IPVPN/MPVPN - Authorization Bypass

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain a missing authorization caused by lack of access control in the web management interface, letting remote attackers access sensitive URLs, exploit requires no authentication. id: CVE-2021-27858 info: name:...

CVE-2020-5902

🚨 CVE-2020-5902 — F5 BIG-IP TMUI RCE CVE-2020-5902 is a critical unauthenticated Remote Code Execution RCE vulnerability in the F5 BIG-IP Traffic Management User Interface TMUI / Configuration utility. 📌 Overview Disclosed by F5 on June 30, 2020 NVD published July 1, 2020, this flaw allowed...

Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among...

EUVD-2026-114906

A weakness has been identified in WAVLINK WN536AX6-A V2605072.0.0. This vulnerability affects the function sub416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument groupname causes os command injection. It is possible to initiate the attack...

CVE-2026-120276

A weakness has been identified in WAVLINK WN536AX6-A V2605072.0.0. This vulnerability affects the function sub416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument groupname causes os command injection. It is possible to initiate the attack...

Tenda F451 Router Command Execution

The vulnerability in the formWriteFacMac function of the Web Management Interface within the Tenda F451 router software relates to improper handling of special elements. Exploitation of this vulnerability may enable a remote attacker to execute arbitrary commands...

CVE-2026-120276: WAVLINK WN536AX6-A: A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0

A weakness has been identified in WAVLINK WN536AX6-A V2605072.0.0. This vulnerability affects the function sub416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument groupname causes os command injection. It is possible to initiate the attack...

CVE-2026-120276

A CRITICAL OS command injection vulnerability exists in the Web Management Interface of the WAVLINK WN536AX6-A router (version V260507_2.0.0 ). The flaw is located in the sub_416760 function within the /bin/ioos file, where improper handling of the group_name argument allows for remote command ex...

CVE-2026-120276 WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection

A weakness has been identified in WAVLINK WN536AX6-A V2605072.0.0. This vulnerability affects the function sub416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument groupname causes os command injection. It is possible to initiate the attack...

CVE-2024-20404

Description A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent ...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect The Pan-OS Checker is to determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface. Before run the script, need to make sure version-table.txt in the same...

CVE-2020-13259

CVE-2020-13259 PoC of Full Account Takeover on RAD SecFlow-1v A vulnerability in the web-based management interface of RAD SecFlow-1v could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient...