https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:59:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03972 bdu:2023-03972 https://cve.radiocsirt.org/vuln/bdu:2023-03972 https://cve.radiocsirt.org/vuln/euvd-2026-199996 EUVD-2026-199996 https://cve.radiocsirt.org/vuln/euvd-2026-199996 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28767 <p>The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36,  USG FLEX 50(W) series firmware versions 5.10 through 5.36,</p> <p>USG20(W)-VPN series firmware versions 5.10 through 5.36, and VPN series firmware versions 5.00 through 5.36. An unauthenticated, LAN-based attacker could leverage the vulnerability to inject some operating system (OS) commands into the device configuration data on an affected device when the cloud management mode is enabled.</p> <p>The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36,  USG FLEX 50(W) series firmware versions 5.10 through 5.36,</p> <p>USG20(W)-VPN series firmware versions 5.10 through 5.36, and VPN series firmware versions 5.00 through 5.36. An unauthenticated, LAN-based attacker could leverage the vulnerability to inject some operating system (OS) commands into the device configuration data on an affected device when the cloud management mode is enabled.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28767 https://cve.radiocsirt.org/vuln/ghsa-6hq2-q59r-h45h <p>The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36,  USG FLEX 50(W) series firmware versions 5.10 through 5.36,</p> <p>USG20(W)-VPN series firmware versions 5.10 through 5.36, and VPN series firmware versions 5.00 through 5.36. An unauthenticated, LAN-based attacker could leverage the vulnerability to inject some operating system (OS) commands into the device configuration data on an affected device when the cloud management mode is enabled.</p> <p>The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36,  USG FLEX 50(W) series firmware versions 5.10 through 5.36,</p> <p>USG20(W)-VPN series firmware versions 5.10 through 5.36, and VPN series firmware versions 5.00 through 5.36. An unauthenticated, LAN-based attacker could leverage the vulnerability to inject some operating system (OS) commands into the device configuration data on an affected device when the cloud management mode is enabled.</p> https://cve.radiocsirt.org/vuln/ghsa-6hq2-q59r-h45h https://cve.radiocsirt.org/vuln/gsd-2023-28767 gsd-2023-28767 https://cve.radiocsirt.org/vuln/gsd-2023-28767 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1765 <p>Ein Angreifer aus dem angrenzenden Netz kann mehrere Schwachstellen in Zyxel Firewall ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein Angreifer aus dem angrenzenden Netz kann mehrere Schwachstellen in Zyxel Firewall ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1765