CVE-2026-86551

The Z80Ultra NX741J product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factorymacaddress in the Settings.Secure database...

CVE-2026-86551: Exposure of Resource to Wrong Sphere

The Z80Ultra NX741J product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factorymacaddress in the Settings.Secure database...

The vulnerability of the fromP2pListFilter (/goform/P2pListFilter) function in the Tenda CX12L Wi-Fi router software allows a hacker to trigger a service failure.

The vulnerability of the fromP2pListFilter /goform/P2pListFilter function in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted POST request...

kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile()

A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A remote attacker, by sending a specially-crafted malicious Wi-Fi beacon, could exploit a vulnerability in the cfg80211mergeprofile function. This flaw causes the kernel to spend an excessive amount of processing time, leading to a...

CVE-2026-86474

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2026-85628

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86585

CVE-2026-86585 affects VEO and VEO-XS Wi-Fi monitors (Fermax) in versions prior to 01.48.001 . The root cause is the lack of signature verification on firmware update packages, allowing an attacker who controls the delivery of an update to install unauthorised firmware on the device. The attack v...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86474 Improper Certificate Validation in the Firmware Download vulnerability

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2026-85628 Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

EUVD-2026-80585

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

CVE-2026-85628

CVE-2026-85628 affects the DuoxMe application and VEO / VEO-XS Wi-Fi monitors (Fermax). During the pairing process, home Wi-Fi credentials are transmitted in cleartext over Wi-Fi Direct , allowing an attacker on the same Wi-Fi Direct network to intercept the network password. The vulnerability ex...

CVE-2026-85628 Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38412)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delWiFiAclRules function. Attackers can exploit this vulnerability by sending a specially crafted POST...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38413)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the delWiFiScheduleCfg function. Attackers can exploit this vulnerability by sending specially crafted POST request...

CVE-2026-86585: Improper Verification of Cryptographic Signature

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86474: Improper Certificate Validation

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2026-85628: Cleartext Transmission of Sensitive Information

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...