https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:51:21.431650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-02479 bdu:2026-02479 2026-10-08T02:51:21.480155+00:00 bdu:2026-02479 https://cve.radiocsirt.org/vuln/euvd-2026-266637 EUVD-2026-266637 2026-10-08T02:51:21.480191+00:00 EUVD-2026-266637 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12386 fkie_cve-2025-12386 2026-10-08T02:51:21.480205+00:00

Pix-Link LV-WR21Q does not enforce any form of authentication for endpoint /goform/getHomePageInfo. Remote unauthenticated attacker is able to use this endpoint to e.g: retrieve cleartext password to the access point.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version V108_108 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

 https://cve.radiocsirt.org/vuln/ghsa-4hm5-jmp9-7g72 GHSA-4hm5-jmp9-7g72 2026-10-08T02:51:21.480239+00:00

Pix-Link LV-WR21Q does not enforce any form of authentication for endpoint /goform/getHomePageInfo. Remote unauthenticated attacker is able to use this endpoint to e.g: retrieve cleartext password to the access point.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version V108_108 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.