https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T13:03:53.498815+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07450 bdu:2025-07450 2026-10-17T13:03:53.503652+00:00 bdu:2025-07450 https://cve.radiocsirt.org/vuln/euvd-2026-239428 EUVD-2026-239428 2026-10-17T13:03:53.503690+00:00 EUVD-2026-239428 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32002 fkie_cve-2025-32002 2026-10-17T13:03:53.503704+00:00

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is enabled. If exploited, a remote unauthenticated attacker may execute an arbitrary OS command.

 https://cve.radiocsirt.org/vuln/ghsa-8x6j-j8rc-9m7p GHSA-8x6j-j8rc-9m7p 2026-10-17T13:03:53.503735+00:00

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is enabled. If exploited, a remote unauthenticated attacker may execute an arbitrary OS command.

 https://cve.radiocsirt.org/vuln/jvndb-2025-005057 jvndb-2025-005057 2026-10-17T13:03:53.503753+00:00

Network attached hard disk 'HDL-T Series' provided by I-O DATA DEVICE, INC. contains multiple vulnerabilities. <ul> <li>OS command injection (CWE-78)</li> <ul> <li>Affected when 'Remote Link3 function' is enabled</li> <li>CVE-2025-32002</li> </ul> <li>Missing authentication for critical function (CWE-306)</li> <ul><li>CVE-2025-32738</li></ul> </ul> Chuya Hayakawa and Ryo Kamino of 00One, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.