https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:26:55.906389+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-13242 cnvd-2019-13242 2026-10-03T06:26:55.979594+00:00 cnvd-2019-13242 https://cve.radiocsirt.org/vuln/euvd-2026-61428 EUVD-2026-61428 2026-10-03T06:26:55.979631+00:00 EUVD-2026-61428 https://cve.radiocsirt.org/vuln/fkie_cve-2018-4069 fkie_cve-2018-4069 2026-10-03T06:26:55.979644+00:00

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-22gr-gpph-j2c5 GHSA-22gr-gpph-j2c5 2026-10-03T06:26:55.979675+00:00

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2018-4069 gsd-2018-4069 2026-10-03T06:26:55.979691+00:00 gsd-2018-4069 https://cve.radiocsirt.org/vuln/icsa-19-122-03 ICSA-19-122-03 — Sierra Wireless AirLink ALEOS (Update B) 2026-10-03T06:26:55.979702+00:00

A specially crafted authenticated HTTP request can inject arbitrary commands, resulting in remote code execution.CVE-2018-4061 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). Activating SNMPD outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate SNMPD without any configuration changes to trigger this vulnerability.CVE-2018-4062 has been assigned to this vulnerability. A CVSS v3 base score of 6.2 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:H). A specially crafted authenticated HTTP request can upload a file, resulting in an executable, routable code upload to the web server.CVE-2018-4063 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). A specially crafted HTTP ping request can cause reflected JavaScript to be executed and run on the user 's browser. An attacker can exploit this by convincing a user to click a link or embedded URL that redirects to the reflected cross-site scripting vulnerability.CVE-2018-4066 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H). A specially crafted HTTP request can cause an authenticated user to perform…