https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T18:21:59.477188+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-20423 cnvd-2025-20423 2026-10-20T18:21:59.480063+00:00 cnvd-2025-20423 https://cve.radiocsirt.org/vuln/euvd-2026-249181 EUVD-2026-249181 2026-10-20T18:21:59.480117+00:00 EUVD-2026-249181 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8639 fkie_cve-2025-8639 2026-10-20T18:21:59.480131+00:00

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the firmware update process. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-26262.

 https://cve.radiocsirt.org/vuln/ghsa-3gj8-pq5m-2h4f GHSA-3gj8-pq5m-2h4f 2026-10-20T18:21:59.480162+00:00

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the firmware update process. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-26262.