https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:38:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-00162 bdu:2025-00162 https://cve.radiocsirt.org/vuln/bdu:2025-00162 https://cve.radiocsirt.org/vuln/euvd-2026-261711 EUVD-2026-261711 https://cve.radiocsirt.org/vuln/euvd-2026-261711 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12856 <p>The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this firmware version has default credentials which, if not changed, would effectively change this vulnerability into an unauthenticated and remote OS command execution issue.</p> <p>The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this firmware version has default credentials which, if not changed, would effectively change this vulnerability into an unauthenticated and remote OS command execution issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-12856 https://cve.radiocsirt.org/vuln/ghsa-5qv9-wh8x-pfpm <p>The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this firmware version has default credentials which, if not changed, would effectively change this vulnerability into an unauthenticated and remote OS command execution issue.</p> <p>The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this firmware version has default credentials which, if not changed, would effectively change this vulnerability into an unauthenticated and remote OS command execution issue.</p> https://cve.radiocsirt.org/vuln/ghsa-5qv9-wh8x-pfpm