https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:43:35.648807+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-09395 bdu:2024-09395 2026-10-05T01:43:35.652395+00:00 bdu:2024-09395 https://cve.radiocsirt.org/vuln/euvd-2026-205340 EUVD-2026-205340 2026-10-05T01:43:35.652431+00:00 EUVD-2026-205340 https://cve.radiocsirt.org/vuln/fkie_cve-2024-50357 fkie_cve-2024-50357 2026-10-05T01:43:35.652446+00:00

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs.

 https://cve.radiocsirt.org/vuln/ghsa-g6j3-5m8r-7p3c GHSA-g6j3-5m8r-7p3c 2026-10-05T01:43:35.652477+00:00

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs.

 https://cve.radiocsirt.org/vuln/jvndb-2024-011744 jvndb-2024-011744 2026-10-05T01:43:35.652496+00:00

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled (CWE-684). The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. Century Systems Co., Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.