https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:27:11.098580+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-20454 cnvd-2018-20454 2026-10-04T21:27:11.105219+00:00 cnvd-2018-20454 https://cve.radiocsirt.org/vuln/euvd-2026-167076 EUVD-2026-167076 2026-10-04T21:27:11.105260+00:00 EUVD-2026-167076 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17917 fkie_cve-2018-17917 2026-10-04T21:27:11.105274+00:00

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.

 https://cve.radiocsirt.org/vuln/ghsa-hx93-w6p2-8rvj GHSA-hx93-w6p2-8rvj 2026-10-04T21:27:11.105304+00:00

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.

 https://cve.radiocsirt.org/vuln/gsd-2018-17917 gsd-2018-17917 2026-10-04T21:27:11.105319+00:00 gsd-2018-17917 https://cve.radiocsirt.org/vuln/icsa-18-282-06 ICSA-18-282-06 — Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server 2026-10-04T21:27:11.105330+00:00

An attacker may be able to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.CVE-2018-17917 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). An attacker could use an undocumented user account default with its default password to login to XMeye and access/view video streams.CVE-2018-17919 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Not all device communication is encrypted. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.CVE-2018-17915 has been assigned to this vulnerability. A CVSS v3 base score of 8.1 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).