https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T23:39:42.911543+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-235085 EUVD-2026-235085 2026-10-16T23:39:42.915757+00:00 EUVD-2026-235085 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45045 fkie_cve-2022-45045 2026-10-16T23:39:42.915795+00:00

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.

 https://cve.radiocsirt.org/vuln/ghsa-rx5h-hxv6-mwc2 GHSA-rx5h-hxv6-mwc2 2026-10-16T23:39:42.915830+00:00

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.

 https://cve.radiocsirt.org/vuln/gsd-2022-45045 gsd-2022-45045 2026-10-16T23:39:42.915850+00:00 gsd-2022-45045