Lucene search
+L

216 matches found

CVE
CVE
added 2026/08/08 11:16 p.m.113 views

CVE-2026-71984

MSI Radix AXE6600 router firmware v781521 includes a command-injection vulnerability in the urlfilter function that allows remote command execution and potential root privileges on the device. Affected component: urlfilter in the firmware; impact includes high confidentiality, integrity, and avai...

9.8CVSS5.8AI score0.0135EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/08 11:16 p.m.14 views

CVE-2026-71984

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject malicious commands and obtain root...

9.8CVSS5.8AI score0.0135EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/08 11:10 p.m.99 views

CVE-2026-71983

CVE-2026-71983 affects the MSI Radix AXE6600 router (firmware v781521). The vulnerability is a command injection in the wps.cgi interface, exploitable via unsanitized input in the pin2g, pin5g, or pin6g parameters. Successful exploitation could allow an attacker to execute arbitrary commands with...

9.8CVSS6AI score0.01621EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/08 11:10 p.m.37 views

CVE-2026-71983 MSI Radix AXE6600 v781521 Command Injection via wps.cgi

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized...

9.8CVSS0.01621EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/08 12:00 a.m.9 views

PT-2026-69231

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the 'wps.cgi' endpoint. Remote attackers can execute arbitrary commands and obtain root privileges by providing malicious input through the pin2g, pin5g, or pin6...

9.8CVSS5.7AI score0.01621EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/08 12:00 a.m.38 views

PT-2026-69236

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description Remote attackers can execute arbitrary commands and obtain root privileges on the underlying system. This is possible through the alg function, which triggers a command injection within the portFw...

9.8CVSS5.5AI score0.0135EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/07/30 4:37 p.m.11 views

SUSE CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

7.5CVSS7.1AI score0.00146EPSS
SaveExploits0References10
NVD
NVD
added 2026/07/30 6:25 a.m.14 views

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

8.4CVSS0.00146EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/30 6:25 a.m.11 views

ALPINE-CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

8.4CVSS6.7AI score0.00146EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/30 6:25 a.m.9 views

AZL-94346 CVE-2026-58043 affecting package nodejs for versions less than 24.18.1-1

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

8.4CVSS7.1AI score0.00146EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/30 6:25 a.m.11 views

UBUNTU-CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

8.4CVSS7.2AI score0.00146EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/07/30 6:25 a.m.9 views

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

8.4CVSS7.2AI score0.00146EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/30 6:02 a.m.15 views

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

7.5CVSS6.7AI score0.00146EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/30 6:02 a.m.13 views

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

7.5CVSS6.7AI score0.00146EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/30 6:02 a.m.7 views

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

7.5CVSS5.6AI score
SaveExploits0References3
CVE
CVE
added 2026/07/30 6:02 a.m.72 views

CVE-2026-58043

CVE-2026-58043 is a vulnerability in Node.js Permission Model enforcement that can over-grant filesystem access across radix-tree prefix boundaries when using --permission. An attacker granted access to one path could read from or write to paths outside the intended allowlist. Affected releases i...

8.4CVSS6.8AI score0.00146EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/30 6:02 a.m.65 views

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

7.5CVSS0.00146EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 6:02 a.m.15 views

EUVD-2026-51021

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

7.5CVSS6.8AI score0.00146EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/07/30 6:02 a.m.16 views

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

8.4CVSS6.8AI score0.00146EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.24 views

PT-2026-66410

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Node.js main Description A flaw in the Permission Model enforcement allows for the over-granting of filesystem access across radix-tree prefix boundaries. When the --permission...

8.4CVSS7.3AI score0.00146EPSS
SaveExploits0References84
Rows per page
Query Builder