https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:35:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-13187 bdu:2025-13187 https://cve.radiocsirt.org/vuln/bdu:2025-13187 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0890 certfr-2025-avi-0890 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0890 https://cve.radiocsirt.org/vuln/euvd-2026-255307 EUVD-2026-255307 https://cve.radiocsirt.org/vuln/euvd-2026-255307 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6892 <p>An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentication mechanism allows unauthorized access to protected API endpoints, including those intended for administrative functions. This vulnerability can be exploited after a legitimate user has logged in, as the system fails to properly validate session context or privilege boundaries. An attacker may leverage this flaw to perform unauthorized privileged operations. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> <p>An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentication mechanism allows unauthorized access to protected API endpoints, including those intended for administrative functions. This vulnerability can be exploited after a legitimate user has logged in, as the system fails to properly validate session context or privilege boundaries. An attacker may leverage this flaw to perform unauthorized privileged operations. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6892 https://cve.radiocsirt.org/vuln/ghsa-788j-2rch-2mj2 <p>An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentication mechanism allows unauthorized access to protected API endpoints, including those intended for administrative functions. This vulnerability can be exploited after a legitimate user has logged in, as the system fails to properly validate session context or privilege boundaries. An attacker may leverage this flaw to perform unauthorized privileged operations. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> <p>An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentication mechanism allows unauthorized access to protected API endpoints, including those intended for administrative functions. This vulnerability can be exploited after a legitimate user has logged in, as the system fails to properly validate session context or privilege boundaries. An attacker may leverage this flaw to perform unauthorized privileged operations. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> https://cve.radiocsirt.org/vuln/ghsa-788j-2rch-2mj2 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2330 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Moxa Router ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Privilegien zu eskalieren, Administratorrechte zu erlangen oder Informationen zu erspähen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Moxa Router ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Privilegien zu eskalieren, Administratorrechte zu erlangen oder Informationen zu erspähen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2330