Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/02/03 9:18 a.m.•15 views

CVE-2025-9974

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitra...

8CVSS5.9AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/02 9:15 a.m.•17 views

CVE-2025-9974

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitra...

8CVSS0.0042EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/02 9:01 a.m.•13 views

CVE-2025-9974

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitra...

8.8CVSS6AI score0.0042EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/02 9:01 a.m.•8 views

CVE-2025-9974 Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitra...

6.7AI score0.0042EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/02 9:01 a.m.•51 views

CVE-2025-9974 Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitra...

0.0042EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/02 12:00 a.m.•21 views

PT-2026-5645

Name of the Vulnerable Software and Affected Versions ONT/Beacon devices affected versions not specified Description The unified WEBUI application contains a flaw in how it handles user input. This allows authenticated users to potentially execute commands on the underlying operating system...

8CVSS6AI score0.0042EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/02 12:00 a.m.•0 views

CVE-2025-9974: Improper Neutralization of Special Elements used in an OS Command

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitra...

8CVSS6.5AI score0.0042EPSS
SaveExploits0References1
Rows per page
Query Builder