Lucene search
+L

400519 matches found

CVE
CVE
added 2026/09/16 1:15 p.m.9 views

CVE-2026-92362

CVE-2026-92362 affects the SSE Frame Parser component in the file crates/ag-ui-client/src/sse.rs of ag-ui-protocol ag-ui 1.0 . The vulnerability allows a remote attacker to trigger resource consumption through manipulation of the parser, potentially leading to a denial-of-service condition. The C...

7.5CVSS7AI score0.00505EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/16 1:12 p.m.12 views

CVE-2026-89028

MikroTik RouterOS versions before 7.24 are affected by a heap memory corruption vulnerability in the userspace SMB daemon. The root cause is an integer underflow triggered by a crafted uniPwdLen field in the SMB1 SessionSetupAndX handler, which causes an oversized copy length to be used when copy...

8.2CVSS6.2AI score0.00557EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 1:07 p.m.16 views

CVE-2026-56719

MikroTik RouterOS versions prior to 7.24 are affected by an out-of-bounds read in the userspace SMB daemon . The flaw is triggered by a crafted uniPwdLen field in a minimal SMB1 SessionSetupAndX frame, and the read occurs in the SessionSetupAndX handler before any credential validation , meaning ...

6.5CVSS6AI score0.00376EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 1:03 p.m.13 views

CVE-2026-73177

Nozomi Networks Labs identified a CWE-345 (Insufficient Verification of Data Authenticity) vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS (firmware V1.06.01 ). The device accepts firmware images via its authenticated web management interface without performing any c...

8.6CVSS5.9AI score0.00142EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 1:03 p.m.68 views

CVE-2026-91843

CheckPoint Security Management and Log Servers are affected by a stack overflow in the unauthenticated login process , which may allow a remote attacker to execute arbitrary code with root privileges . The vulnerability is rated CVSS 9.8 (Critical) with a network attack vector requiring no privil...

9.8CVSS6.1AI score0.005EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 1:03 p.m.10 views

CVE-2026-73176

Nozomi Networks Labs identified an OS Command Injection (CWE-78) vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can execute arbitrary OS commands as root via crafted request parame...

8.6CVSS6.4AI score0.00963EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 1:02 p.m.10 views

CVE-2026-73175

Nozomi Networks Labs identified a CWE-400 (Uncontrolled Resource Consumption) vulnerability in the OPC UA gateway component of the Advantech EKI-1242EIMS industrial Ethernet switch running firmware V1.06.01 . An adjacent unauthenticated attacker can exhaust the server session pool by opening mult...

7.1CVSS5.7AI score0.00228EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 1:00 p.m.9 views

CVE-2026-92361

A remote resource consumption vulnerability affects the SSE Client component of ag-ui-protocol ag-ui 1.0 , specifically in the file sdks/community/go/pkg/client/sse/client.go. An attacker with low privileges can trigger excessive resource consumption over the network without user interaction, res...

5.3CVSS5.1AI score0.0051EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/16 12:59 p.m.10 views

CVE-2026-73174

Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of the Advantech EKI-1242EIMS industrial Ethernet switch, firmware version V1.06.01 . A network-adjacent passive observer can intercept management traffic ...

8.7CVSS5.7AI score0.00142EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:58 p.m.13 views

CVE-2026-73173

Nozomi Networks Labs identified a CWE-306 (Missing Authentication for Critical Function) vulnerability in the edgserver management protocol of the Advantech EKI-1242EIMS industrial Ethernet switch running firmware version V1.06.01 . A remote unauthenticated attacker can invoke critical device-man...

8.8CVSS5.8AI score0.0068EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:57 p.m.17 views

CVE-2026-73172

Nozomi Networks Labs identified an OS Command Injection (CWE-78) vulnerability in the edgserver management service of the Advantech EKI-1242EIMS industrial Ethernet switch, running firmware version V1.06.01 . A remote, unauthenticated attacker can execute arbitrary OS commands with root privilege...

9.3CVSS6.5AI score0.01732EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:55 p.m.9 views

CVE-2026-73171

Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of the Advantech EKI-1242EIMS industrial switch, firmware version V1.06.01 . A remote authenticated attacker can overwrite arbitrary files on the device filesystem by uploa...

8.6CVSS6AI score0.00496EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:53 p.m.9 views

CVE-2026-73170

Nozomi Networks Labs identified a CWE-94 Code Injection vulnerability in the Modbus CSV import workflow of the Advantech EKI-1242EIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can craft a malicious imported file to achieve arbitrary Lua code execution ...

8.6CVSS6.5AI score0.00514EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:52 p.m.9 views

CVE-2026-73169

Nozomi Networks Labs identified a stored Cross-Site Scripting (CWE-79) vulnerability in the Modbus transaction management interface of the Advantech EKI-1242EIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can inject malicious script content that later e...

6.3CVSS5.8AI score0.00514EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:51 p.m.11 views

CVE-2026-73167

Nozomi Networks Labs identified a CWE-78 OS Command Injection in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch (firmware V1.06.01 ). A remote authenticated attacker can execute arbitrary OS commands as root via crafted request parameters, yielding high imp...

8.6CVSS6.4AI score0.00963EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:50 p.m.11 views

CVE-2026-73166

Nozomi Networks Labs identified a CWE-94 Code Injection vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch, affecting firmware V1.06.01 . A remote authenticated attacker with high privileges can execute arbitrary code on the device, including O...

8.6CVSS6.7AI score0.00673EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:44 p.m.10 views

CVE-2026-73165

Nozomi Networks Labs identified an OS command injection (CWE-78) vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can execute arbitrary OS commands as root by sending crafted request...

8.6CVSS6.4AI score0.00963EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:37 p.m.11 views

CVE-2026-73164

Advantech EKI-1242IEIMS (firmware V1.06.01 ) is affected by an OS command injection (CWE-78) vulnerability in its web management interface . A remote authenticated attacker can execute arbitrary OS commands as root by sending crafted request parameters. The CVSS 4.0 base score is 8.6 (HIGH) with ...

8.6CVSS6.4AI score0.00919EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:36 p.m.10 views

CVE-2026-73163

Nozomi Networks Labs identified an OS Command Injection (CWE-78) vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch, firmware V1.06.01 . A remote authenticated attacker can execute arbitrary OS commands as root by supplying crafted request para...

8.6CVSS6.4AI score0.00919EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 12:35 p.m.14 views

CVE-2026-19535

Nozomi Networks Labs identified a CWE-352 (Cross-Site Request Forgery) vulnerability in the LuCI administrative web interface of the Advantech EKI-1242IEIMS industrial Ethernet switch (firmware V1.06.01 ). A remote, unauthenticated attacker can perform unauthorized state-changing requests on beha...

8.6CVSS5.8AI score0.00245EPSS
SaveExploits0References2
Rows per page
Query Builder