https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:19:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-248502 EUVD-2026-248502 https://cve.radiocsirt.org/vuln/euvd-2026-248502 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52917 <p>The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests.</p> <p>The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-52917 https://cve.radiocsirt.org/vuln/ghsa-mrw7-q7w8-vj5j <p>The Yealink YMCS RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests.</p> <p>The Yealink YMCS RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests.</p> https://cve.radiocsirt.org/vuln/ghsa-mrw7-q7w8-vj5j https://cve.radiocsirt.org/vuln/icsa-25-219-08 <p>The affected products lack serial number verification attempt limits, enabling brute-force enumeration (last five digits). The affected products lack rate limiting, potentially enabling information disclosure via excessive requests. The affected products fail to enforce access restrictions on OpenAPIs for frozen enterprise accounts, allowing unauthorized access to deactivated interfaces. The certificate upload function in the affected products does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.</p> <p>The affected products lack serial number verification attempt limits, enabling brute-force enumeration (last five digits). The affected products lack rate limiting, potentially enabling information disclosure via excessive requests. The affected products fail to enforce access restrictions on OpenAPIs for frozen enterprise accounts, allowing unauthorized access to deactivated interfaces. The certificate upload function in the affected products does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.</p> https://cve.radiocsirt.org/vuln/icsa-25-219-08