https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T03:07:33.170325+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-245807 EUVD-2026-245807 2026-10-17T03:07:33.233802+00:00 EUVD-2026-245807 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41427 fkie_cve-2025-41427 2026-10-17T03:07:33.233839+00:00

WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection Diagnostics page. If a remote authenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed.

 https://cve.radiocsirt.org/vuln/ghsa-7pgx-3wpq-wj9f GHSA-7pgx-3wpq-wj9f 2026-10-17T03:07:33.233876+00:00

WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection Diagnostics page. If a remote authenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000041 jvndb-2025-000041 2026-10-17T03:07:33.233895+00:00

Multiple wireless LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. <ul> <li>Unrestricted upload of file with dangerous type (CWE-434) - CVE-2025-36519</li> <li>OS command injection in Connection Diagnostics page (CWE-78) - CVE-2025-41427</li> <li>Stored cross-site scripting in WebGUI (CWE-79) - CVE-2025-43877</li> <li>OS command injection in the telnet function (CWE-78) - CVE-2025-43879</li> <li>OS command injection in miniigd SOAP service (CWE-78) - CVE-2025-48890</li> </ul> CVE-2025-36519 Tien Phan reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2025-41427 Yoshiki Yuzawa of IssueHunt, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2025-43877 Kawauchi Manami of NEC Fielding,Ltd. and Toyama Taku of NEC Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2025-43879, CVE-2025-48890 Chuya Hayakawa of 00One, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.