https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T04:40:40.744924+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-10974 cnvd-2018-10974 2026-10-16T04:40:40.748004+00:00 cnvd-2018-10974 https://cve.radiocsirt.org/vuln/euvd-2026-64513 EUVD-2026-64513 2026-10-16T04:40:40.748035+00:00 EUVD-2026-64513 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10167 fkie_cve-2018-10167 2026-10-16T04:40:40.748049+00:00

The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a hard-coded cryptographic key, so anyone who knows that key and the algorithm can decrypt it. A low-privilege user could decrypt and modify the backup file in order to elevate their privileges. This is fixed in version 2.6.1_Windows.

 https://cve.radiocsirt.org/vuln/ghsa-g9p8-h989-gp6g GHSA-g9p8-h989-gp6g 2026-10-16T04:40:40.748077+00:00

The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a hard-coded cryptographic key, so anyone who knows that key and the algorithm can decrypt it. A low-privilege user could decrypt and modify the backup file in order to elevate their privileges. This is fixed in version 2.6.1_Windows.

 https://cve.radiocsirt.org/vuln/gsd-2018-10167 gsd-2018-10167 2026-10-16T04:40:40.748094+00:00 gsd-2018-10167