81 matches found
CVE-2026-2035703-x300
CVE-2026-2035703: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Under coordinated disclosure 90-day embargo Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-2035703 Severity: Critical CVSS 9.8 CWE: CWE-78 OS Command...
CVE-2026-53452
Ground Station (a browser-based satellite tracking and SDR suite) prior to version 0.4.13 is vulnerable to an unauthenticated out-of-containment file read . The configure-sdr Socket.IO command accepts a recordingPath parameter that is stored without validation in backend/handlers/entities/sdr.py ...
EUVD-2026-62495
Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated configure-sdr Socket.IO command accepts a recordingPath for the sigmf-playback SDR and backend/handlers/entities/sdr.py stores it...
PT-2026-78443
Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated configure-sdr Socket.IO command accepts a recordingPath for the sigmf-playback SDR and backend/handlers/entities/sdr.py stores it...
CVE-2026-68213
In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...
CVE-2026-68213 media: rtl2832_sdr: Return queued buffers on start_streaming() failure
In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...
EUVD-2026-55314
In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...
PT-2026-69613
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the rtl2832 sdr driver within the media subsystem. The vb2 framework provides buffers to the driver via buf queue before calling start streaming. If the rtl2832 s...
CVE-2026-53985
Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...
CVE-2026-30364
CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...
EUVD-2026-22937
CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...
CVE-2026-30364
CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...
CVE-2026-30364
CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...
CVE-2026-30364
CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003785)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003785 advisory. In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory...
EUVD-2025-199140
Malicious code in @seezo/sdr-mcp-server npm...
EUVD-2021-24259
Malware in sbrugna...
CVE-2021-37778
There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution...
PT-2024-17439 · Apache · Apache Sdr
Name of the Vulnerable Software and Affected Versions: Apache SDR affected versions not specified Description: The issue concerns an authentication bypass. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about ...
New SDR feature released for Cisco Secure Email
Cisco Talos today announced the release of a new mechanism that allows Cisco Secure Email customers the option to submit Sender Domain Reputation SDR disputes through TalosIntelligence.com. Customers now have the option of receiving self-service support through TalosIntelligence.com or may contin...