CVE-2026-97866: Channel Accessible by Non-Endpoint

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

Siemens SIMATIC Devices Channel Accessible by Non-Endpoint (CVE-2023-7008)

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles or the upstream DNS resolver to manipulate records. This plugin only works with Tenable.ot. Please visit...

SINEC Traffic Analyzer Man-in-the-Middle

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks lies in the ability to access the channel from a point that is not a final destination. Exploiting this vulnerability could allow an attacker to execute a “man-in-the-middl...

Cisco Catalyst SD-WAN Manager CLI Privilege Escalation

The vulnerability of the CLI component in the Cisco Catalyst SD-WAN Manager centralized network management system is related to access to the channel from a non-endpoint location. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

Veeam Updater Man-in-the-Middle

The vulnerability of the Veeam Updater, a component of backup and recovery tools such as Veeam Backup for Salesforce, Veeam Backup for Nutanix AHPV, and Veeam Backup for AWS, relates to access to a channel from a non-endpoint location. Exploiting this vulnerability allows a remote attacker to...

TUG Home Base Server MITM

The vulnerability of the TUG Home Base Server relates to access to a channel from a point that is not a final destination. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...