https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:35:28.662537+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225955 EUVD-2026-225955 2026-10-07T16:35:28.727273+00:00 EUVD-2026-225955 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27567 fkie_cve-2025-27567 2026-10-07T16:35:28.727313+00:00

Cross-site scripting vulnerability exists in the NickName registration screen of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from the LAN side of the product.

 https://cve.radiocsirt.org/vuln/ghsa-523h-xj4w-6jhm GHSA-523h-xj4w-6jhm 2026-10-07T16:35:28.727346+00:00

Cross-site scripting vulnerability exists in the NickName registration screen of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from the LAN side of the product.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000018 jvndb-2025-000018 2026-10-07T16:35:28.727364+00:00

Home gateway HGW-BL1500HM provided by KDDI CORPORATION contains multiple vulnerabilities listed below. <ul><li>Stored cross-site scripting in the NickName registration screen (CWE-79) - CVE-2025-27567</li><li>Stored cross-site scripting in the USB storage file-sharing function (CWE-79) - CVE-2025-27574</li><li>Path traversal in the file/folder listing process of the USB storage file-sharing function (CWE-22) - CVE-2025-27716</li><li>Path traversal in the file upload process of the USB storage file-sharing function (CWE-22) - CVE-2025-27718</li><li>Path traversal in the file download process of the USB storage file-sharing function (CWE-22) - CVE-2025-27726</li><li>Path traversal in the file deletion process of the USB storage file-sharing function (CWE-22) - CVE-2025-27932</li></ul> Huiseong Seo reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.