https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:13:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-249365 EUVD-2026-249365 https://cve.radiocsirt.org/vuln/euvd-2026-249365 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5095 <p>Burk Technology ARC Solo&#39;s password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device&#39;s HTTP endpoint without providing valid credentials. The system does not enforce proper authentication or session validation, allowing the password change to proceed without verifying the request&#39;s legitimacy.</p> <p>Burk Technology ARC Solo&#39;s password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device&#39;s HTTP endpoint without providing valid credentials. The system does not enforce proper authentication or session validation, allowing the password change to proceed without verifying the request&#39;s legitimacy.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-5095 https://cve.radiocsirt.org/vuln/ghsa-f2pq-885w-7238 <p>Burk Technology ARC Solo&#39;s password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device&#39;s HTTP endpoint without providing valid credentials. The system does not enforce proper authentication or session validation, allowing the password change to proceed without verifying the request&#39;s legitimacy.</p> <p>Burk Technology ARC Solo&#39;s password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device&#39;s HTTP endpoint without providing valid credentials. The system does not enforce proper authentication or session validation, allowing the password change to proceed without verifying the request&#39;s legitimacy.</p> https://cve.radiocsirt.org/vuln/ghsa-f2pq-885w-7238 https://cve.radiocsirt.org/vuln/icsa-25-219-03 <p>The device&#39;s password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device&#39;s HTTP endpoint without providing valid credentials. The system does not enforce proper authentication or session validation, allowing the password change to proceed without verifying the request&#39;s legitimacy.</p> <p>The device&#39;s password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device&#39;s HTTP endpoint without providing valid credentials. The system does not enforce proper authentication or session validation, allowing the password change to proceed without verifying the request&#39;s legitimacy.</p> https://cve.radiocsirt.org/vuln/icsa-25-219-03