CVE-2026-75108

Next Terminal is vulnerable due to missing per-asset authorization checks on its portal ping and wake-on-LAN endpoints . Any authenticated user (PR:L) can supply arbitrary asset IDs to retrieve unauthorized asset metadata (display names, reachability, network addresses) or trigger wake-on-LAN pac...

EUVD-2026-60387

Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they are not granted access to. Attackers can call these endpoints with arbitrary asset identifiers to retrieve asset information...

PT-2025-48074

Name of the Vulnerable Software and Affected Versions Primakon Pi Portal version 1.0.18 Description API endpoints responsible for retrieving object-specific or filtered data, such as user profiles and project records, do not adequately validate server-side authorization. This allows unauthorized...