https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:00:46.913726+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-379519 EUVD-2026-379519 2026-10-06T17:00:46.957487+00:00 EUVD-2026-379519 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34023 fkie_cve-2025-34023 2026-10-06T17:00:46.957524+00:00

A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the underlying system by using crafted path traversal sequences. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC.

 https://cve.radiocsirt.org/vuln/ghsa-37m2-9j5v-c4v4 GHSA-37m2-9j5v-c4v4 2026-10-06T17:00:46.957558+00:00

A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the underlying system by using crafted path traversal sequences (e.g., ../../). This can expose sensitive files such as /etc/passwd and /etc/shadow.