https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:49:26.960173+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261150 EUVD-2026-261150 2026-10-03T12:49:27.005572+00:00 EUVD-2026-261150 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34044 fkie_cve-2025-34044 2026-10-03T12:49:27.005615+00:00

A remote command injection vulnerability exists in the confirm.php interface of the WIFISKY 7-layer Flow Control Router via a specially-crafted HTTP GET request to the t parameter. Insufficient input validation allows unauthenticated attackers to execute arbitrary OS commands. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-25 UTC.

 https://cve.radiocsirt.org/vuln/ghsa-h96j-wp68-r9rj GHSA-h96j-wp68-r9rj 2026-10-03T12:49:27.005650+00:00

A remote command injection vulnerability exists in the confirm.php interface of the WIFISKY 7-layer Flow Control Router via a specially-crafted HTTP GET request to the t parameter. Insufficient input validation allows unauthenticated attackers to execute arbitrary OS commands.