https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:31:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-13185 bdu:2025-13185 https://cve.radiocsirt.org/vuln/bdu:2025-13185 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0890 certfr-2025-avi-0890 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0890 https://cve.radiocsirt.org/vuln/euvd-2026-255320 EUVD-2026-255320 https://cve.radiocsirt.org/vuln/euvd-2026-255320 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6949 <p>An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to existing users. In certain scenarios, this vulnerability could allow an attacker to gain full administrative control over the affected device, leading to potential account impersonation. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> <p>An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to existing users. In certain scenarios, this vulnerability could allow an attacker to gain full administrative control over the affected device, leading to potential account impersonation. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6949 https://cve.radiocsirt.org/vuln/ghsa-xqwv-wj6g-m73m <p>An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to existing users. In certain scenarios, this vulnerability could allow an attacker to gain full administrative control over the affected device, leading to potential account impersonation. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> <p>An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to existing users. In certain scenarios, this vulnerability could allow an attacker to gain full administrative control over the affected device, leading to potential account impersonation. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> https://cve.radiocsirt.org/vuln/ghsa-xqwv-wj6g-m73m https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2330 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Moxa Router ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Privilegien zu eskalieren, Administratorrechte zu erlangen oder Informationen zu erspähen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Moxa Router ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Privilegien zu eskalieren, Administratorrechte zu erlangen oder Informationen zu erspähen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2330