https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T23:17:42.286491+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-247614 EUVD-2026-247614 2026-10-16T23:17:42.334086+00:00 EUVD-2026-247614 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52379 fkie_cve-2025-52379 2026-10-16T23:17:42.334125+00:00

Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware update feature. The /web/um_fileName_set.cgi and /web/um_web_upgrade.cgi endpoints fail to properly sanitize the upgradeFileName parameter, allowing authenticated attackers to execute arbitrary OS commands on the device, resulting in remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-v28v-mcvx-jj9g GHSA-v28v-mcvx-jj9g 2026-10-16T23:17:42.334157+00:00

Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware update feature. The /web/um_fileName_set.cgi and /web/um_web_upgrade.cgi endpoints fail to properly sanitize the upgradeFileName parameter, allowing authenticated attackers to execute arbitrary OS commands on the device, resulting in remote code execution.