https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:32:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-13123 bdu:2025-13123 https://cve.radiocsirt.org/vuln/bdu:2025-13123 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0890 certfr-2025-avi-0890 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0890 https://cve.radiocsirt.org/vuln/euvd-2026-255319 EUVD-2026-255319 https://cve.radiocsirt.org/vuln/euvd-2026-255319 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6950 <p>An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens (JWT) used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid tokens, thereby bypassing authentication controls and impersonating any user. Exploitation of this vulnerability can result in complete system compromise, enabling unauthorized access, data theft, and full administrative control over the affected device. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> <p>An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens (JWT) used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid tokens, thereby bypassing authentication controls and impersonating any user. Exploitation of this vulnerability can result in complete system compromise, enabling unauthorized access, data theft, and full administrative control over the affected device. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6950 https://cve.radiocsirt.org/vuln/ghsa-29jf-57xj-hxj2 <p>An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens (JWT) used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid tokens, thereby bypassing authentication controls and impersonating any user. Exploitation of this vulnerability can result in complete system compromise, enabling unauthorized access, data theft, and full administrative control over the affected device. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> <p>An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens (JWT) used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid tokens, thereby bypassing authentication controls and impersonating any user. Exploitation of this vulnerability can result in complete system compromise, enabling unauthorized access, data theft, and full administrative control over the affected device. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.</p> https://cve.radiocsirt.org/vuln/ghsa-29jf-57xj-hxj2 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2330 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Moxa Router ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Privilegien zu eskalieren, Administratorrechte zu erlangen oder Informationen zu erspähen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Moxa Router ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Privilegien zu eskalieren, Administratorrechte zu erlangen oder Informationen zu erspähen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2330