Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 07:09:24 +0000 bdu:2025-05637 https://cve.radiocsirt.org/vuln/bdu:2025-05637 bdu:2025-05637 https://cve.radiocsirt.org/vuln/bdu:2025-05637 cnvd-2025-15793 https://cve.radiocsirt.org/vuln/cnvd-2025-15793 cnvd-2025-15793 https://cve.radiocsirt.org/vuln/cnvd-2025-15793 EUVD-2026-236550 https://cve.radiocsirt.org/vuln/euvd-2026-236550 EUVD-2026-236550 https://cve.radiocsirt.org/vuln/euvd-2026-236550 fkie_cve-2025-46633 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46633 <p>Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in response to successful authentication. The IV is always EU5H62G9ICGRNI43.</p> <p>Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in response to successful authentication. The IV is always EU5H62G9ICGRNI43.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-46633 GHSA-pjhx-jp78-8pv5 https://cve.radiocsirt.org/vuln/ghsa-pjhx-jp78-8pv5 <p>Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in response to successful authentication. The IV is always EU5H62G9ICGRNI43.</p> <p>Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in response to successful authentication. The IV is always EU5H62G9ICGRNI43.</p> https://cve.radiocsirt.org/vuln/ghsa-pjhx-jp78-8pv5