https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:59:33.198309+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-18359 EUVD-2026-18359 2026-10-04T12:59:33.259167+00:00 EUVD-2026-18359 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36267 fkie_cve-2022-36267 2026-10-04T12:59:33.259205+00:00

In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called without user authentication when crafting a malicious http request by injecting code in one of the parameters allowing for remote code execution. This vulnerability is exploited via the binary file /home/www/cgi-bin/diagnostics.cgi that accepts unauthenticated requests and unsanitized data. As a result, a malicious actor can craft a specific request and interact remotely with the device.

 https://cve.radiocsirt.org/vuln/ghsa-w4rx-v2mp-rhf4 GHSA-w4rx-v2mp-rhf4 2026-10-04T12:59:33.259257+00:00

In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called without user authentication when crafting a malicious http request by injecting code in one of the parameters allowing for remote code execution. This vulnerability is exploited via the binary file /home/www/cgi-bin/diagnostics.cgi that accepts unauthenticated requests and unsanitized data. As a result, a malicious actor can craft a specific request and interact remotely with the device.

 https://cve.radiocsirt.org/vuln/gsd-2022-36267 gsd-2022-36267 2026-10-04T12:59:33.259277+00:00 gsd-2022-36267