https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:19:47.738173+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-230883 EUVD-2026-230883 2026-10-06T23:19:47.807006+00:00 EUVD-2026-230883 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2141 fkie_cve-2022-2141 2026-10-06T23:19:47.807044+00:00

SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-59rr-qhh3-g554 GHSA-59rr-qhh3-g554 2026-10-06T23:19:47.807075+00:00

SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.

 https://cve.radiocsirt.org/vuln/gsd-2022-2141 gsd-2022-2141 2026-10-06T23:19:47.807092+00:00 gsd-2022-2141 https://cve.radiocsirt.org/vuln/icsa-22-200-01 ICSA-22-200-01 — MiCODUS MV720 GPS tracker 2026-10-06T23:19:47.807103+00:00

The API server has an authentication mechanism that allows devices to use a hard-coded master password. This may allow an attacker to send SMS commands directly to the GPS tracker as if they were coming from the GPS owner 's mobile number. CVE-2022-2107 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). SMS-based GPS commands can be executed without authentication. CVE-2022-2141 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The main web server has a reflected cross-site scripting vulnerability that could allow an attacker to gain control by tricking a user into making a request. CVE-2022-2199 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). The main web server has an authenticated insecure direct object reference vulnerability on endpoint and parameter device IDs, which accept arbitrary device IDs without further verification. CVE-2022-34150 has been assigned to this vulnerability. A CVSS v3 base score of 7.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N). The main web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter Device ID, which accepts arbitrary device IDs. CVE-…