<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 06:59:56 +0000</lastBuildDate>
    <item>
      <title>EUVD-2026-256209</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-256209</link>
      <description>EUVD-2026-256209</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-256209</guid>
    </item>
    <item>
      <title>fkie_cve-2010-5330</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2010-5330</link>
      <description>&lt;p&gt;On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2010-5330</guid>
    </item>
    <item>
      <title>GHSA-c5j2-ggvf-gwvg</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-c5j2-ggvf-gwvg</link>
      <description>&lt;p&gt;On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-c5j2-ggvf-gwvg</guid>
    </item>
    <item>
      <title>gsd-2010-5330</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2010-5330</link>
      <description>gsd-2010-5330</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2010-5330</guid>
    </item>
  </channel>
</rss>
