https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:50:02.259987+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-206266 EUVD-2026-206266 2026-10-08T15:50:02.323081+00:00 EUVD-2026-206266 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31408 fkie_cve-2024-31408 2026-10-08T15:50:02.323121+00:00

OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.

 https://cve.radiocsirt.org/vuln/ghsa-865x-83mq-3qpq GHSA-865x-83mq-3qpq 2026-10-08T15:50:02.323155+00:00

OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.

 https://cve.radiocsirt.org/vuln/jvndb-2024-000106 jvndb-2024-000106 2026-10-08T15:50:02.323171+00:00

AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System. IX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below. <ul> <li><b>OS command injection (CWE-78)</b> - CVE-2024-31408</li> <li><b>Insufficiently protected credentials (CWE-522)</b> - CVE-2024-39290</li> <li><b>Use of hard-coded cryptographic key (CWE-321)</b> - CVE-2024-45837</li> <li><b>Improper access control (CWE-522)</b> - CVE-2024-47142</li> </ul> Vera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated. After the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.