https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:52:51.171766+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233792 EUVD-2026-233792 2026-10-06T01:52:51.239143+00:00 EUVD-2026-233792 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2772 fkie_cve-2025-2772 2026-10-06T01:52:51.239196+00:00

BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within /cgi-bin/tools_usermanage.asp. The issue results from transmitting a list of users and their credentials to be handled on the client side. An attacker can leverage this vulnerability to disclose transported credentials, leading to further compromise. Was ZDI-CAN-25895.

 https://cve.radiocsirt.org/vuln/ghsa-rj6h-c4q3-734p GHSA-rj6h-c4q3-734p 2026-10-06T01:52:51.239266+00:00

BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within /cgi-bin/tools_usermanage.asp. The issue results from transmitting a list of users and their credentials to be handled on the client side. An attacker can leverage this vulnerability to disclose transported credentials, leading to further compromise. Was ZDI-CAN-25895.