Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:37:29 +0000 bdu:2025-09784 https://cve.radiocsirt.org/vuln/bdu:2025-09784 bdu:2025-09784 https://cve.radiocsirt.org/vuln/bdu:2025-09784 EUVD-2026-248501 https://cve.radiocsirt.org/vuln/euvd-2026-248501 EUVD-2026-248501 https://cve.radiocsirt.org/vuln/euvd-2026-248501 fkie_cve-2025-52916 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52916 <p>Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits).</p> <p>Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-52916 GHSA-w9xp-xgf9-cvcf https://cve.radiocsirt.org/vuln/ghsa-w9xp-xgf9-cvcf <p>Yealink YMCS RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits).</p> <p>Yealink YMCS RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits).</p> https://cve.radiocsirt.org/vuln/ghsa-w9xp-xgf9-cvcf ICSA-25-219-08 — Yealink IP Phones and RPS (Redirect and Provisioning Service) https://cve.radiocsirt.org/vuln/icsa-25-219-08 <p>The affected products lack serial number verification attempt limits, enabling brute-force enumeration (last five digits). The affected products lack rate limiting, potentially enabling information disclosure via excessive requests. The affected products fail to enforce access restrictions on OpenAPIs for frozen enterprise accounts, allowing unauthorized access to deactivated interfaces. The certificate upload function in the affected products does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.</p> <p>The affected products lack serial number verification attempt limits, enabling brute-force enumeration (last five digits). The affected products lack rate limiting, potentially enabling information disclosure via excessive requests. The affected products fail to enforce access restrictions on OpenAPIs for frozen enterprise accounts, allowing unauthorized access to deactivated interfaces. The certificate upload function in the affected products does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.</p> https://cve.radiocsirt.org/vuln/icsa-25-219-08