CVE-2026-19396

The ASUS RT-BE57 router is vulnerable to an issue where a predictable seed in the pseudo-random number generator (PRNG) is used during IFTTT pairing token generation . This flaw allows an unauthenticated nearby user to derive the pairing token by observing values during an administrator-initiated...

CVE-2026-19396

A predictable seed in the pseudo-random number generator PRNG in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing...

CVE-2012-2596: Improper Control of Generation of Code

The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to read or modify settings via a crafted URL, related to an "XML injection" attack...