109 matches found
CVE-2026-16876
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet...
EUVD-2026-72188
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet...
CVE-2026-16876
NEC UNIVERGE IX-R/IX-V series routers are affected by an authentication bypass in the WebGUI component, classified as Missing Authentication for Critical Function (CWE-306) . A remote unauthenticated attacker can send a specially crafted message to the WebGUI over the internet to execute arbitrar...
CVE-2026-16876
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet...
CVE-2026-16876
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet...
CVE-2026-16876: Missing Authentication for Critical Function
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet...
PT-2026-86590
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet...
UNIVERGE IX-R/IX-V series routers vulnerable to missing authentication for critical function
Overview UNIVERGE IX-R/IX-V series routers provided by NEC Corporation contain the following vulnerability. Missing authentication for critical function CWE-306 - CVE-2026-16876 Kojiro Enokida of SOPHOS reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
CVE-2025-11546
CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends...
CVE-2025-11546
The CVE-2025-11546 entry affects NEC CLUSTERPRO X for Linux (versions 4.0–5.2), EXPRESSCLUSTER X for Linux (4.0–5.2), CLUSTERPRO X SingleServerSafe for Linux (4.0–5.2), and EXPRESSCLUSTER X SingleServerSafe for Linux (4.0–5.2). The connected sources describe an OS command injection vulnerability ...
CVE-2025-11546
CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends...
EUVD-2020-26845
Malware in sbrugna...
EUVD-2020-26844
Malware in sbrugna...
EUVD-2022-30281
Malicious code in bioql PyPI...
EUVD-2025-29671
Malicious code in bioql PyPI...
EUVD-2024-34057
Malicious code in bioql PyPI...
EUVD-2021-31561
Malicious code in bioql PyPI...
EUVD-2024-34058
Malicious code in bioql PyPI...
EUVD-2021-8095
Malicious code in bioql PyPI...
CVE-2025-8153
Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6 and UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21 allows a attacker to inject an arbitrary scripts...