https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T10:37:55.482392+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-15882 cnvd-2017-15882 2026-10-15T10:37:55.585059+00:00 cnvd-2017-15882 https://cve.radiocsirt.org/vuln/euvd-2026-76058 EUVD-2026-76058 2026-10-15T10:37:55.585095+00:00 EUVD-2026-76058 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9807 fkie_cve-2017-9807 2026-10-15T10:37:55.585120+00:00

An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval() call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python code or OS commands via api/saveconfig.

 https://cve.radiocsirt.org/vuln/ghsa-829m-7f46-r3j5 GHSA-829m-7f46-r3j5 2026-10-15T10:37:55.585185+00:00

An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval() call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python code or OS commands via api/saveconfig.

 https://cve.radiocsirt.org/vuln/gsd-2017-9807 gsd-2017-9807 2026-10-15T10:37:55.585203+00:00 gsd-2017-9807