https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:43:06.018054+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225952 EUVD-2026-225952 2026-10-06T23:43:06.021695+00:00 EUVD-2026-225952 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27718 fkie_cve-2025-27718 2026-10-06T23:43:06.021739+00:00

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file upload process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered or arbitrary code may be executed by a crafted HTTP request to specific functions of the product from a device connected to the LAN side.

 https://cve.radiocsirt.org/vuln/ghsa-32p9-v6w3-v6fj GHSA-32p9-v6w3-v6fj 2026-10-06T23:43:06.021788+00:00

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file upload process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered or arbitrary code may be executed by a crafted HTTP request to specific functions of the product from a device connected to the LAN side.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000018 jvndb-2025-000018 2026-10-06T23:43:06.021821+00:00

Home gateway HGW-BL1500HM provided by KDDI CORPORATION contains multiple vulnerabilities listed below. <ul><li>Stored cross-site scripting in the NickName registration screen (CWE-79) - CVE-2025-27567</li><li>Stored cross-site scripting in the USB storage file-sharing function (CWE-79) - CVE-2025-27574</li><li>Path traversal in the file/folder listing process of the USB storage file-sharing function (CWE-22) - CVE-2025-27716</li><li>Path traversal in the file upload process of the USB storage file-sharing function (CWE-22) - CVE-2025-27718</li><li>Path traversal in the file download process of the USB storage file-sharing function (CWE-22) - CVE-2025-27726</li><li>Path traversal in the file deletion process of the USB storage file-sharing function (CWE-22) - CVE-2025-27932</li></ul> Huiseong Seo reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.