https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T23:37:22.718844+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-44351 cnvd-2020-44351 2026-10-24T23:37:22.723070+00:00 cnvd-2020-44351 https://cve.radiocsirt.org/vuln/euvd-2026-36773 EUVD-2026-36773 2026-10-24T23:37:22.723124+00:00 EUVD-2026-36773 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5757 fkie_cve-2020-5757 2026-10-24T23:37:22.723148+00:00

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM's "New" HTTPS API.

 https://cve.radiocsirt.org/vuln/ghsa-3f9w-43j6-x43v GHSA-3f9w-43j6-x43v 2026-10-24T23:37:22.723194+00:00

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM's "New" HTTPS API.

 https://cve.radiocsirt.org/vuln/gsd-2020-5757 gsd-2020-5757 2026-10-24T23:37:22.723234+00:00 gsd-2020-5757