https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T04:00:40.785691+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-242609 EUVD-2026-242609 2026-10-16T04:00:40.788497+00:00 EUVD-2026-242609 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49255 fkie_cve-2023-49255 2026-10-16T04:00:40.788531+00:00

The router console is accessible without authentication at "data" field, and while a user needs to be logged in in order to modify the configuration, the session state is shared. If any other user is currently logged in, the anonymous user can execute commands in the context of the authenticated one. If the logged in user has administrative privileges, it is possible to use webadmin service configuration commands to create a new admin user with a chosen password.

 https://cve.radiocsirt.org/vuln/ghsa-fw6m-hgqv-hr8c GHSA-fw6m-hgqv-hr8c 2026-10-16T04:00:40.788563+00:00

The router console is accessible without authentication at "data" field, and while a user needs to be logged in in order to modify the configuration, the session state is shared. If any other user is currently logged in, the anonymous user can execute commands in the context of the authenticated one. If the logged in user has administrative privileges, it is possible to use webadmin service configuration commands to create a new admin user with a chosen password.

 https://cve.radiocsirt.org/vuln/gsd-2023-49255 gsd-2023-49255 2026-10-16T04:00:40.788582+00:00 gsd-2023-49255