https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:05:58.888857+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02284 bdu:2025-02284 2026-10-03T07:05:58.966516+00:00 bdu:2025-02284 https://cve.radiocsirt.org/vuln/cnvd-2025-11442 cnvd-2025-11442 2026-10-03T07:05:58.966554+00:00 cnvd-2025-11442 https://cve.radiocsirt.org/vuln/euvd-2026-258644 EUVD-2026-258644 2026-10-03T07:05:58.966570+00:00 EUVD-2026-258644 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39795 fkie_cve-2024-39795 2026-10-03T07:05:58.966582+00:00

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_max_sessions` POST parameter.

 https://cve.radiocsirt.org/vuln/ghsa-qxh2-8jw8-hx7g GHSA-qxh2-8jw8-hx7g 2026-10-03T07:05:58.966611+00:00

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_max_sessions` POST parameter.