CVE-2026-32838

Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption. Attackers on the same network can intercept management traffic to capture administrator credentials and sensitive configuration data...

CVE-2026-22627

CVE-2026-22627 affects Fortinet FortiSwitch AX Fixed 1.0.0 through 1.0.1. The vulnerability is a buffer copy without input size checking in LLDP packet handling, enabling an unauthenticated attacker on the same adjacent network to run arbitrary code or commands on the device. Impact per the entry...

CVE-2025-41708 Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission...