CVE-2026-122044

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...

EUVD-2026-124165

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...

CVE-2026-122044

The Philips Hue Bridge Pro is affected by a Protection Mechanism Failure (CWE-693) that allows for an authentication bypass . The vulnerability is located within the HTTP service , which listens on TCP port 443 by default. A network-adjacent attacker can exploit this flaw to bypass authentication...

CVE-2026-122044 Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...

CVE-2026-122044: Philips Hue Bridge Pro: Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...

CVE-2026-123180

A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This...

CVE-2026-123180

A missing authentication vulnerability exists in NETGEAR Nighthawk RAX30 models. This flaw allows a network adjacent attacker who is authenticated to the Wi-Fi network to access the device without further authentication. Impacted functions include the ability to obtain sensitive information and t...

EUVD-2026-121277

A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This...

CVE-2026-123180 Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 models

A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This...

CVE-2026-123180: NETGEAR RAX30: A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has…

A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This...

PT-2026-141796

Name of the Vulnerable Software and Affected Versions NETGEAR RAX30 versions prior to 1.0.15.110 Description A missing authentication issue allows a network-adjacent attacker who has authenticated to the wifi network to obtain sensitive information and tamper with device configuration, including...

CVE-2026-125400: ettercap: Ettercap through 0.8.4.1 contains a use-after-free vulnerability in func_pcre() in src/ec_filter.c that reads the PCRE2…

Ettercap through 0.8.4.1 contains a use-after-free vulnerability in funcpcre in src/ecfilter.c that reads the PCRE2 ovector after freeing match data. Network-adjacent attackers can send packets matching a loaded pcreregex substitution filter to corrupt memory and potentially execute code as root...

Linux Distros Unpatched Vulnerability : CVE-2026-125400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ettercap through 0.8.4.1 contains a use-after-free vulnerability in funcpcre in src/ecfilter.c that reads the PCRE2 ovector after freeing match data...

EulerOS 2.0 SP12 : pam (EulerOS-SA-2026-4433)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in...

CVE-2026-108760

A flaw was found in llamafarm. An insecure default configuration exposes the unauthenticated application programming interface API server on all network interfaces while ignoring host overrides. A network-adjacent attacker can connect directly to the management endpoints to permanently delete...

CVE-2026-92208_remote_mDNS_overflow

CVE-2026-92208 A heap-based buffer overflow vulnerability in the mDNS component of NoMachine allows possibly unauthenticated, network-adjacent attackers to execute arbitrary code in the context of the service account. Note: ZDI holds exclusivity rights over the technical details, so no PoC or...

CLEANSTART-2023-EC90112 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager

Security vulnerability affects the netatalk package. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager...

CVE-2026-118610

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability...

CVE-2026-118606

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The...

EUVD-2026-112205

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability...