https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:41:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-358674 EUVD-2026-358674 https://cve.radiocsirt.org/vuln/euvd-2026-358674 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63586 <p>The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system() function. By submitting a specially crafted username containing shell metacharacters, an unauthenticated attacker with network access to the device can escape the command context and execute arbitrary commands with root privileges.</p> <p>The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system() function. By submitting a specially crafted username containing shell metacharacters, an unauthenticated attacker with network access to the device can escape the command context and execute arbitrary commands with root privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-63586 https://cve.radiocsirt.org/vuln/ghsa-cf4x-hgj3-m8g7 <p>The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system() function. By submitting a specially crafted username containing shell metacharacters, an unauthenticated attacker with network access to the device can escape the command context and execute arbitrary commands with root privileges.</p> <p>The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system() function. By submitting a specially crafted username containing shell metacharacters, an unauthenticated attacker with network access to the device can escape the command context and execute arbitrary commands with root privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-cf4x-hgj3-m8g7 https://cve.radiocsirt.org/vuln/vde-2026-083 <p>Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execution vulnerability. IE-SR-2TX-WL-4G routers are also affected by a SMS password authorization bypass vulnerability.</p> <p>Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities.</p> <p>Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execution vulnerability. IE-SR-2TX-WL-4G routers are also affected by a SMS password authorization bypass vulnerability.</p> <p>Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities.</p> https://cve.radiocsirt.org/vuln/vde-2026-083