CVE-2026-103264

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...

CVE-2026-4309

CVE-2026-4309 concerns NEC Platforms, Ltd. Aterm Series devices with a Missing Authorization vulnerability. The available documents state that an attacker can retrieve specific device information and alter settings over the network. The CVSS metrics indicate a Network attack vector, high attack c...

PLANET UNI-NMS-Lite 操作系统命令注入漏洞

Planet UNI-NMS-Lite is a universal network management system from PLANET China that monitors all deployed wired or wireless PoE industrial grade network devices. Planet UNI-NMS-Lite suffers from a command injection vulnerability that can be exploited by an attacker to submit a special request to...

The vulnerability of the Cisco Wide Area Application Services Software (WAAS) SNMP daemon allows a hacker to read any data available on the device through the SNMP protocol.

The vulnerability of the Cisco WAAS software package related to the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to read any data available on the device through the SNMPv2c protocol...