https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:06:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-27612 EUVD-2026-27612 https://cve.radiocsirt.org/vuln/euvd-2026-27612 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31698 <p>Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon.</p> <p>Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-31698 https://cve.radiocsirt.org/vuln/ghsa-7r3r-jp3h-r9vx <p>Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon.</p> <p>Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon.</p> https://cve.radiocsirt.org/vuln/ghsa-7r3r-jp3h-r9vx https://cve.radiocsirt.org/vuln/gsd-2021-31698 gsd-2021-31698 https://cve.radiocsirt.org/vuln/gsd-2021-31698 https://cve.radiocsirt.org/vuln/jvndb-2026-026400 <p>Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc.&lt;ul&gt;&lt;li&gt;web server for debugging purposes remains enabled (CWE-489) - CVE-2026-66403&lt;/li&gt;&lt;li&gt;Missing server certificate verification in MQTT communications (CWE-295) - CVE-2026-66404&lt;/li&gt;&lt;li&gt;telnet server remains enabled (CWE-489) - CVE-2026-66405&lt;/li&gt;&lt;li&gt;Missing server certificate verification in wget command (CWE-295) - CVE-2026-66406&lt;/li&gt;&lt;ul&gt;&lt;li&gt;A man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected product.&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Use of a Broken or Risky Cryptographic Algorithm in WebSocket communication authentication (CWE-327) - CVE-2026-66407&lt;/li&gt;&lt;ul&gt;&lt;li&gt;A man-in-the-middle attack could allow an attacker to analyze the WebSocket private key.&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Weak password for root account (CWE-1391) - CVE-2026-66408&lt;/li&gt;&lt;li&gt;Weak password for Wi-Fi hotspot network (CWE-1391) - CVE-2026-66409&lt;/li&gt;&lt;li&gt;Improper server certificate verification in the smartphone app (CWE-295) - CVE-2026-66410&lt;/li&gt;&lt;li&gt;Dependency on vulnerable third-party component (CWE-1395)&lt;/li&gt;&lt;ul&gt;&lt;li&gt;Known vulnerability in Quectel EG25-G device (CVE-2021-31698)&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Incorrect implementation of authentication algorithm in Websocket communications (CWE-303) - CVE-2026-66411&lt;/li&gt;&lt;/ul&gt;Hellohas Robotics Inc. reported and coordinated these vulnerabilities with ECOVACS ROBOT…</p> <p>Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc.&lt;ul&gt;&lt;li&gt;web server for debugging purposes remains enabled (CWE-489) - CVE-2026-66403&lt;/li&gt;&lt;li&gt;Missing server certificate verification in MQTT communications (CWE-295) - CVE-2026-66404&lt;/li&gt;&lt;li&gt;telnet server remains enabled (CWE-489) - CVE-2026-66405&lt;/li&gt;&lt;li&gt;Missing server certificate verification in wget command (CWE-295) - CVE-2026-66406&lt;/li&gt;&lt;ul&gt;&lt;li&gt;A man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected product.&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Use of a Broken or Risky Cryptographic Algorithm in WebSocket communication authentication (CWE-327) - CVE-2026-66407&lt;/li&gt;&lt;ul&gt;&lt;li&gt;A man-in-the-middle attack could allow an attacker to analyze the WebSocket private key.&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Weak password for root account (CWE-1391) - CVE-2026-66408&lt;/li&gt;&lt;li&gt;Weak password for Wi-Fi hotspot network (CWE-1391) - CVE-2026-66409&lt;/li&gt;&lt;li&gt;Improper server certificate verification in the smartphone app (CWE-295) - CVE-2026-66410&lt;/li&gt;&lt;li&gt;Dependency on vulnerable third-party component (CWE-1395)&lt;/li&gt;&lt;ul&gt;&lt;li&gt;Known vulnerability in Quectel EG25-G device (CVE-2021-31698)&lt;/li&gt;&lt;/ul&gt;&lt;li&gt;Incorrect implementation of authentication algorithm in Websocket communications (CWE-303) - CVE-2026-66411&lt;/li&gt;&lt;/ul&gt;Hellohas Robotics Inc. reported and coordinated these vulnerabilities with ECOVACS ROBOT…</p> https://cve.radiocsirt.org/vuln/jvndb-2026-026400