https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:19:57.458042+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02291 bdu:2025-02291 2026-10-06T18:19:57.461141+00:00 bdu:2025-02291 https://cve.radiocsirt.org/vuln/cnvd-2025-11443 cnvd-2025-11443 2026-10-06T18:19:57.461192+00:00 cnvd-2025-11443 https://cve.radiocsirt.org/vuln/euvd-2026-258639 EUVD-2026-258639 2026-10-06T18:19:57.461208+00:00 EUVD-2026-258639 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39788 fkie_cve-2024-39788 2026-10-06T18:19:57.461219+00:00

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists within the `ftp_name` POST parameter.

 https://cve.radiocsirt.org/vuln/ghsa-3qqr-ch4p-vc36 GHSA-3qqr-ch4p-vc36 2026-10-06T18:19:57.461248+00:00

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists within the `ftp_name` POST parameter.