https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T11:33:47.233919+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-15843 cnvd-2018-15843 2026-10-17T11:33:47.320339+00:00 cnvd-2018-15843 https://cve.radiocsirt.org/vuln/euvd-2026-77217 EUVD-2026-77217 2026-10-17T11:33:47.320385+00:00 EUVD-2026-77217 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12575 fkie_cve-2017-12575 2026-10-17T11:33:47.320409+00:00

An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configuration. Some APIs don't require authentication. An attacker could exploit this vulnerability by sending a crafted HTTP request to retrieve DHCP clients, firmware version, and network status (ex.: curl -X http://[IP]/aterm_httpif.cgi/negotiate -d "REQ_ID=SUPPORT_IF_GET").

 https://cve.radiocsirt.org/vuln/ghsa-jgf4-v7wj-j4rg GHSA-jgf4-v7wj-j4rg 2026-10-17T11:33:47.320455+00:00

An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configuration. Some APIs don't require authentication. An attacker could exploit this vulnerability by sending a crafted HTTP request to retrieve DHCP clients, firmware version, and network status (ex.: curl -X http://[IP]/aterm_httpif.cgi/negotiate -d "REQ_ID=SUPPORT_IF_GET").

 https://cve.radiocsirt.org/vuln/gsd-2017-12575 gsd-2017-12575 2026-10-17T11:33:47.320488+00:00 gsd-2017-12575 https://cve.radiocsirt.org/vuln/jvndb-2021-000006 jvndb-2021-000006 2026-10-17T11:33:47.320509+00:00

Aterm WF800HP, Aterm WG2600HP, and Aterm WG2600HP2 provided by NEC Corporation contain multiple vulnerabilities. Aterm WF800HP: *Cross-site Scripting (CWE-79) - CVE-2021-20620 Aterm WG2600HP and Aterm WG2600HP2: *Improper Access Control (CWE-284) - CVE-2017-12575 *Cross-Site Request Forgery (CWE-352) - CVE-2021-20621 *Cross-site Scripting (CWE-79) - CVE-2021-20622 CVE-2021-20620 Satoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20621, CVE-2021-20622 Noriaki Iwasaki of Cyber Defense Institute, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.