CVE-2025-26503

A crafted system call argument can cause memory corruption...

CVE-2025-34186

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...

CVE-2025-26503

A crafted system call argument can cause memory corruption...

CVE-2025-26503 Buffer manipulation

A crafted system call argument can cause memory corruption...

CVE-2025-26503

The CVE-2025-26503 entry maps to a memory corruption issue triggered by a crafted system call argument. Connected sources reference Wind River VxWorks 7 as the affected platform, with CVSSv3.1 metrics indicating Local attack vector, High privileges required, No user interaction, and Confidentiali...

CVE-2025-26503 Buffer manipulation

A crafted system call argument can cause memory corruption...

CVE-2025-26503: Improper Restriction of Operations within the Bounds of a Memory Buffer

A crafted system call argument can cause memory corruption...

PT-2025-38473

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A crafted system call argument can cause memory corruption. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2025-57293

The COMFAST CF-XR11 wireless router (firmware V2.7.2 ) is vulnerable to a command injection flaw in the multi_pppoe API . The vulnerability exists because the phy_interface parameter is not properly sanitized in the sub_423930 function within /usr/bin/webmgnt. Attackers can execute arbitrary comm...

CVE-2025-57293

A command injection vulnerability in COMFAST CF-XR11 firmware V2.7.2 exists in the multipppoe API, processed by the sub423930 function in /usr/bin/webmgnt. The phyinterface parameter is not sanitized, allowing attackers to inject arbitrary commands via a POST request to...

CVE-2025-34186

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...

CVE-2025-34186

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Due to the binary's interpretation of non-zero...

CVE-2025-34186

Ilevia EVE X1/X5 Server (≤ 4.7.18.0.eden) contains a pre-authentication authentication bypass via unsanitized input passed to a system() call, where non-zero exit codes are treated as success, enabling remote attackers to bypass authentication and gain full system access. Related disclosures ment...

CVE-2025-34186 Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...

CVE-2025-34186 Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...

CVE-2025-34186

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...

PT-2025-38076

Name of the Vulnerable Software and Affected Versions Ilevia EVE X1/X5 Server versions prior to 4.7.18.0.eden Description The Ilevia EVE X1/X5 Server authentication mechanism has a flaw where unsanitized input is passed to a system call during authentication. This allows attackers to inject speci...

CVE-2025-34186: Improper Authentication

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...

PT-2025-37681

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability exists in the Linux kernel related to the xsk socket kernel functionality. Specifically, the issue involves a potential NULL pointer dereference in the xsk transmit Tx pa...

Built-in Runtime Security for Containers

Security teams struggle with visibility into behaviors inside their running containers. Qualys is today announcing general availability of Container Runtime Security CRS to provide industry-leading visibility for running containers using an approach that is container-engine agnostic and layered...