https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:11:12.343036+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-369820 EUVD-2026-369820 2026-10-02T11:11:12.390532+00:00 EUVD-2026-369820 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40854 fkie_cve-2026-40854 2026-10-02T11:11:12.390573+00:00

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/login_user. An attacker can bypass authentication by using directory entries such as "." or ".." in the cookie, allowing unauthorized access to the administration panel.This issue has been fixed in firmware version 1.1.0.651412

 https://cve.radiocsirt.org/vuln/ghsa-7wq2-g42r-wr2h GHSA-7wq2-g42r-wr2h 2026-10-02T11:11:12.390611+00:00

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/login_user. An attacker can bypass authentication by using directory entries such as "." or ".." in the cookie, allowing unauthorized access to the administration panel.This issue has been fixed in firmware version 1.1.0.651412