https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:48:11.374310+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-14142 cnvd-2021-14142 2026-10-06T22:48:11.379848+00:00 cnvd-2021-14142 https://cve.radiocsirt.org/vuln/euvd-2026-21737 EUVD-2026-21737 2026-10-06T22:48:11.379891+00:00 EUVD-2026-21737 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20649 fkie_cve-2021-20649 2026-10-06T22:48:11.379906+00:00

ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication response. As a result, an arbitrary OS command may be executed on the affected device.

 https://cve.radiocsirt.org/vuln/ghsa-5244-5vqh-qwmc GHSA-5244-5vqh-qwmc 2026-10-06T22:48:11.379938+00:00

ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication response. As a result, an arbitrary OS command may be executed on the affected device.

 https://cve.radiocsirt.org/vuln/gsd-2021-20649 gsd-2021-20649 2026-10-06T22:48:11.379954+00:00 gsd-2021-20649 https://cve.radiocsirt.org/vuln/jvndb-2021-000008 jvndb-2021-000008 2026-10-06T22:48:11.379966+00:00

Multiple products provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. *Improper Access Control (CWE-284) - CVE-2021-20643 *Script injection in web setup page (CWE-74) - CVE-2021-20644 *Stored cross-site scripting (CWE-79) - CVE-2021-20645 *Cross-site request forgery (CWE-352) - CVE-2021-20646, CVE-2021-20647, CVE-2021-20650 *OS command injection (CWE-78) - CVE-2021-20648 *Improper server certificate verification (CWE-295) - CVE-2021-20649 *OS command injection via UPnP (CWE-78) - CVE-2014-8361 CVE-2021-20643 NAGAKAWA(ISHIBASHI), Tsuyoshi of INSTITUTE of INFORMATION SECURITY Yuasa Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20644 Ryo Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20645, CVE-2021-20646 Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20647, CVE-2021-20648, CVE-2021-20649 Satoru Nagaoka of Cyber Defense Institute, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20650 Yutaka WATANABE reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Inf…