https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T00:06:31.980316+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-268094 EUVD-2026-268094 2026-10-13T00:06:31.982969+00:00 EUVD-2026-268094 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24789 fkie_cve-2026-24789 2026-10-13T00:06:31.983003+00:00

An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.

 https://cve.radiocsirt.org/vuln/ghsa-r6ff-p4vx-28hv GHSA-r6ff-p4vx-28hv 2026-10-13T00:06:31.983032+00:00

An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.

 https://cve.radiocsirt.org/vuln/icsa-26-041-02 ICSA-26-041-02 — ZLAN Information Technology Co. ZLAN5143D 2026-10-13T00:06:31.983048+00:00

Authentication for the device can be bypassed by directly accessing internal URLs. An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.