Lucene search
+L

10 matches found

Vulnrichment
Vulnrichment
•added 2026/07/30 6:53 a.m.•23 views

CVE-2026-44108 Firewall bypass during shutdown

Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal services may become externally accessible, potentially allowing an unauthenticated remote attacker to connect to these...

9.8CVSS6.1AI score0.00831EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/30 6:53 a.m.•63 views

CVE-2026-44108

CVE-2026-44108 describes a flaw in the shutdown script execution order that terminates the firewall during shutdown, creating a temporary window where internal services may become externally accessible. This could allow an unauthenticated remote attacker to connect to those services and potential...

9.8CVSS6.1AI score0.00831EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:34 p.m.•22 views

CVE-2026-49325

Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with access to the Wireless Control Module WCM wiring harness to bypass the anti-theft shutdown. The WCM signals shutdown to a peer ECU via...

4.6CVSS5.5AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/29 2:16 p.m.•35 views

CVE-2026-49316

Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the motorcycle's anti-theft shutdown by forcing the Wireless Control Module WCM into the CAN bus-off state. Using a well-known CAN...

4.6CVSS0.00268EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/29 12:37 p.m.•48 views

CVE-2026-49325

The CVE affects the Indian Motorcycle Scout Bobber + Tech 2025 model year, where the Wireless Control Module (WCM) wiring harness controls anti‑theft shutdown. A falling‑edge voltage transition on a dedicated wire pair signals shutdown to a peer ECU, but the receiving ECU cannot distinguish an ac...

4.6CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/29 12:00 a.m.•22 views

PT-2026-44853

Name of the Vulnerable Software and Affected Versions Indian Motorcycle Scout Bobber + Tech version 2025 Description Improper handling of physical conditions in the bike-shutdown control allows a physical attacker with access to the Wireless Control Module WCM wiring harness to bypass the...

4.6CVSS5.8AI score0.00237EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/29 12:00 a.m.•3 views

CVE-2026-49325: Improper Handling of Physical or Environmental Conditions

Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with access to the Wireless Control Module WCM wiring harness to bypass the anti-theft shutdown. The WCM signals shutdown to a peer ECU via...

4.6CVSS5.8AI score0.00237EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/05/06 10:20 p.m.•18 views

CVE-2026-43226

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS component. Due to an incorrect state transition, an RDS connection can bypass its expected shutdown process. This can lead to the connection becoming permanently stuck in a shutdown-queued state, potentially causing a denial of...

7.5CVSS5.8AI score0.00716EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/05 12:31 a.m.•12 views

EUVD-2025-201299

An Expected Behavior Violation CWE-440 vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand system integrity check in the...

6.7CVSS6.4AI score0.00125EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/06/10 8:00 p.m.•22 views

CVE-2022-25845

The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote servers. Workaround: If upgrading is not...

9.8CVSS8.1AI score0.18743EPSS
SaveExploits6References8
Rows per page
Query Builder