https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:52:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-248503 EUVD-2026-248503 https://cve.radiocsirt.org/vuln/euvd-2026-248503 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52918 <p>Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.</p> <p>Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-52918 https://cve.radiocsirt.org/vuln/ghsa-pwj2-p9vr-j8jr <p>Yealink YMCS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.</p> <p>Yealink YMCS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.</p> https://cve.radiocsirt.org/vuln/ghsa-pwj2-p9vr-j8jr https://cve.radiocsirt.org/vuln/icsa-25-219-08 <p>The affected products lack serial number verification attempt limits, enabling brute-force enumeration (last five digits). The affected products lack rate limiting, potentially enabling information disclosure via excessive requests. The affected products fail to enforce access restrictions on OpenAPIs for frozen enterprise accounts, allowing unauthorized access to deactivated interfaces. The certificate upload function in the affected products does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.</p> <p>The affected products lack serial number verification attempt limits, enabling brute-force enumeration (last five digits). The affected products lack rate limiting, potentially enabling information disclosure via excessive requests. The affected products fail to enforce access restrictions on OpenAPIs for frozen enterprise accounts, allowing unauthorized access to deactivated interfaces. The certificate upload function in the affected products does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.</p> https://cve.radiocsirt.org/vuln/icsa-25-219-08