https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:33:52.586556+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-368494 EUVD-2026-368494 2026-10-05T23:33:52.604956+00:00 EUVD-2026-368494 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77853 fkie_cve-2026-77853 2026-10-05T23:33:52.604997+00:00

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.

 https://cve.radiocsirt.org/vuln/ghsa-fmfw-g6xj-377f GHSA-fmfw-g6xj-377f 2026-10-05T23:33:52.605031+00:00

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000133 jvndb-2026-000133 2026-10-05T23:33:52.605048+00:00

O-RU "FF-RFI079I4" and "FF-RFI078I4" provided by LITE-ON Technology Corporation contain multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/912.html' target='_blank'></a><ul><li>OS Command Injection (CWE-78) - CVE-2026-77853</li><li>Hidden Functionality (CWE-912) - CVE-2026-80217</li></ul>Yuto Aono, Yutaro Osako, and Shunsuke Saruwatari of The University of Osaka reported these vulnerabilities to the developer and coordinated. After the coordination was completed, they reported the case to JPCERT/CC to notify users of the solution through JVN.