https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:58:54.941909+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-536 certfr-2014-avi-536 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Huawei RomPager</span>. Elles permettent à un a… 2026-10-02T11:58:55.007709+00:00 certfr-2014-avi-536 https://cve.radiocsirt.org/vuln/euvd-2026-103684 EUVD-2026-103684 2026-10-02T11:58:55.007751+00:00 EUVD-2026-103684 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9222 fkie_cve-2014-9222 2026-10-02T11:58:55.007766+00:00

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-528r-899g-3h95 GHSA-528r-899g-3h95 2026-10-02T11:58:55.007797+00:00

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2014-9222 gsd-2014-9222 2026-10-02T11:58:55.007814+00:00 gsd-2014-9222 https://cve.radiocsirt.org/vuln/icsma-18-240-01 ICSMA-18-240-01 — ICSMA-18-240-01_Qualcomm Life Capsule 2026-10-02T11:58:55.007826+00:00

This vulnerability allows an attacker to send a specially crafted HTTP cookie to the web management portal to write arbitrary data to the device memory, which may allow remote code execution.CVE-2014-9222 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/vde-2026-071 VDE-2026-071 — JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON touch, AQUIS touch devices 2026-10-02T11:58:55.007845+00:00

Multiple products from JUMO are affected by webserver vulnerability "CVE-2013-6786, CVE-2014-9222, CVE-2014-9223. This vulnerability leads to DOS of the device by using a misfortune cookie and reflected XSS attacks.