<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-17T07:48:39.874790+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2022-05226</id>
    <title>bdu:2022-05226</title>
    <updated>2026-10-17T07:48:39.967173+00:00</updated>
    <content>bdu:2022-05226</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2022-05226"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-18259</id>
    <title>EUVD-2026-18259</title>
    <updated>2026-10-17T07:48:39.967219+00:00</updated>
    <content>EUVD-2026-18259</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-18259"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2022-35733</id>
    <title>fkie_cve-2022-35733</title>
    <updated>2026-10-17T07:48:39.967235+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2022-35733"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-qrqm-fhg8-7274</id>
    <title>GHSA-qrqm-fhg8-7274</title>
    <updated>2026-10-17T07:48:39.967266+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-qrqm-fhg8-7274"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2022-35733</id>
    <title>gsd-2022-35733</title>
    <updated>2026-10-17T07:48:39.967283+00:00</updated>
    <content>gsd-2022-35733</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2022-35733"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/jvndb-2022-002337</id>
    <title>jvndb-2022-002337</title>
    <updated>2026-10-17T07:48:39.967294+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Multiple digital video recorders provided by UNIMO Technology Co., Ltd do not perform authentication for some critical functions (CWE-306) in the device management web interface.

The reporter states that attacks exploiting this vulnerability have been observed.

Yoshiki Mori, Ushimaru Hayato and Masaki Kubo of National Institute of Information and Communications Technology Cybersecurity Research Institute reported this vulnerability to the developer and coordinated. After coordination was completed, this case was reported to JPCERT/CC and JPCERT/CC coordinated with the developer for the publication.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/jvndb-2022-002337"/>
  </entry>
</feed>
