https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T23:56:13.612708+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277047 EUVD-2026-277047 2026-10-24T23:56:13.615319+00:00 EUVD-2026-277047 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67113 fkie_cve-2025-67113 2026-10-24T23:56:13.615354+00:00

OS command injection in the CWMP client (/ftl/bin/cwmp) of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attackers controlling the ACS endpoint to execute arbitrary commands as root via a crafted TR-069 Download URL that is passed unescaped into the firmware upgrade pipeline.

 https://cve.radiocsirt.org/vuln/ghsa-23f9-j3qr-h3hv GHSA-23f9-j3qr-h3hv 2026-10-24T23:56:13.615384+00:00

OS command injection in the CWMP client (/ftl/bin/cwmp) of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attackers controlling the ACS endpoint to execute arbitrary commands as root via a crafted TR-069 Download URL that is passed unescaped into the firmware upgrade pipeline.