247586 matches found
CVE-2026-44104
The CVE-2026-44104 entry describes a vulnerability in the basemodule firmware update process of the charging controller, where only a CRC32 checksum is validated and no cryptographic signature verification is performed. Root cause: lack of signature verification allows an unauthenticated remote a...
EUVD-2026-51039
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...
CVE-2026-44099
CVE-2026-44099 is a local privilege escalation. Connected sources describe a vulnerability enabling a low-privilege local user to gain root privileges via manipulation of system configuration, specifically cited as Local Privilege Escalation via pppd password injection. The NVD entry reiterates t...
EUVD-2026-51034
A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...
EUVD-2026-51033
This vulnerability allows an unauthenticated remote attacker with control over the OCPP backend via firewall-bypass to perform an OS command injection, resulting in the execution of arbitrary commands as the limited user charx-oa. Charging could be interrupted...
EUVD-2026-51031
A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...
CVE-2026-44095
CVE-2026-44095 is described as a local privilege escalation affecting a script used for network configuration. A low-privileged local user can execute arbitrary commands as root, leading to full system compromise. The CVSS metrics indicate high impact on confidentiality, integrity, and availabili...
EUVD-2026-51028
A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...
CVE-2026-44091
CVE-2026-44091 describes an unauthenticated remote attacker who can post a malicious ID to the MQTT Broker, causing the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss. The published CVSS metrics indicate a high severity: CVSS 4....
EUVD-2026-51026
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...
EUVD-2026-51002
The Points and Rewards for WooCommerce WordPress plugin before 2.10.1 does not have authorisation checks in place on a wallet and points update action that is available to unauthenticated users, and does not verify that the requester owns the account being changed, allowing unauthenticated...
CVE-2026-14222
CVE-2026-14222 affects the Easy Appointments WordPress plugin up to version 3.12.26 . The issue is a missing capability/nonce check in a connection-deletion action, allowing users with Contributor level access to delete the booking configuration and effectively disable the booking system. This is...
CVE-2026-16527
CVE-2026-16527 affects the PCP project’s pmproxy service. An unauthenticated attacker can bypass access controls via crafted requests to the /store endpoint, enabling overwriting of any PMDA metric and leading to arbitrary code execution and system takeover. Root cause: missing/ineffective access...
EUVD-2026-50976
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover...
CVE-2026-16527
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover. Mitigation To mitigate this issue, restrict network access ...
EUVD-2026-50965
A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...
EUVD-2026-50956
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...
CVE-2026-17924
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...