CVE-2026-49195

Unauthenticated Debug Service. The /sbin/mtkdut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands...

CVE-2026-49195

Unauthenticated Debug Service. The /sbin/mtkdut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands...

CVE-2026-49195 Predator Connect W6x: unauthenticated Debug Service

Unauthenticated Debug Service. The /sbin/mtkdut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands...

PT-2026-35060

Name of the Vulnerable Software and Affected Versions Dgraph versions prior to 25.3.3 Description Dgraph exposes the process command line through the unauthenticated '/debug/vars' endpoint on Alpha. Since the admin token is often provided via the --security startup flag, an unauthenticated attack...

CVE-2026-33153 Tandoor Recipes's Unauthenticated Debug Parameter Leaks Full Raw SQL Queries Including Schema, Table Names, and Access Control Logic

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the Recipe API endpoint exposes a hidden ?debug=true query parameter that returns the complete raw SQL query being executed, including all table names, column names, JO...

CVE-2025-36743 SolarEdge SE3680H - Exposed Debug interface

SolarEdge SE3680H has an exposed debug/test interface accessible to unauthenticated actors, allowing disclosure of system internals and execution of debug commands...

CVE-2025-36743 SolarEdge SE3680H - Exposed Debug interface

SolarEdge SE3680H has an exposed debug/test interface accessible to unauthenticated actors, allowing disclosure of system internals and execution of debug commands...

CVE-2025-10653

An unauthenticated debug port may allow access to the device file system...

CVE-2025-10653

An unauthenticated debug port may allow access to the device file system...

CVE-2025-10653 Raise3D Pro2 Series 3D Printers Authentication Bypass Using an Alternate Path or Channel

An unauthenticated debug port may allow access to the device file system...

CVE-2025-10653

Technical details such as affected products/versions, root cause, and remediation are not publicly provided in the connected documents. Monitor for updates from vendors and security feeds to obtain concrete information and a confirmed fix.

Raise3D Pro2 Series 3D Printers**

RISK EVALUATION Successful exploitation of this vulnerability could result in data exfiltration and compromise of the target device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...

PT-2025-40419

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An unauthenticated debug port may allow access to the device file system. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Raisecom MSG1200 安全漏洞

The Raisecom MSG1200 is a Gigabit Converged Gateway from Raisecom China. A security vulnerability exists in the Raisecom MSG1200 that stems from an unauthenticated debug port that may allow access to the device file system...

NUUO NVRmini 2 Arbitrary Code Execution Vulnerability

NUUO provides a stable and high performance digital networked surveillance system. The NUUO NVRmini 2 suffers from an arbitrary code execution vulnerability that can be exploited by an attacker to inject and execute arbitrary code with root privileges due to unauthenticated and hidden debug scrip...