https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:34:45.652242+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-07166 cnvd-2017-07166 2026-10-07T11:34:45.656249+00:00 cnvd-2017-07166 https://cve.radiocsirt.org/vuln/euvd-2026-75091 EUVD-2026-75091 2026-10-07T11:34:45.656280+00:00 EUVD-2026-75091 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7909 fkie_cve-2017-7909 2026-10-07T11:34:45.656294+00:00

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages.

 https://cve.radiocsirt.org/vuln/ghsa-63p9-9p5p-v46f GHSA-63p9-9p5p-v46f 2026-10-07T11:34:45.656322+00:00

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages.

 https://cve.radiocsirt.org/vuln/gsd-2017-7909 gsd-2017-7909 2026-10-07T11:34:45.656337+00:00 gsd-2017-7909 https://cve.radiocsirt.org/vuln/icsa-17-122-03 ICSA-17-122-03 — Advantech B+B SmartWorx MESR901 2026-10-07T11:34:45.656348+00:00

The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages.CVE-2017-7909 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).