https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:43:11.307857+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-310022 EUVD-2026-310022 2026-10-06T16:43:11.354740+00:00 EUVD-2026-310022 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33361 fkie_cve-2026-33361 2026-10-06T16:43:11.354779+00:00

In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3" files use reversible XOR over only the first 1024 bytes with a predictable key derivation model.

 https://cve.radiocsirt.org/vuln/ghsa-pfqv-vhwj-2rjw GHSA-pfqv-vhwj-2rjw 2026-10-06T16:43:11.354813+00:00

In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3" files use reversible XOR over only the first 1024 bytes with a predictable key derivation model.