https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:31:27 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-01045 cnvd-2018-01045 https://cve.radiocsirt.org/vuln/cnvd-2018-01045 https://cve.radiocsirt.org/vuln/euvd-2026-73271 EUVD-2026-73271 https://cve.radiocsirt.org/vuln/euvd-2026-73271 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5255 <p>In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a specially-crafted POST request to the get_chart function and run OS-level commands, effectively as root.</p> <p>In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a specially-crafted POST request to the get_chart function and run OS-level commands, effectively as root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5255 https://cve.radiocsirt.org/vuln/ghsa-x9r7-5gw2-pphx <p>In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a specially-crafted POST request to the get_chart function and run OS-level commands, effectively as root.</p> <p>In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a specially-crafted POST request to the get_chart function and run OS-level commands, effectively as root.</p> https://cve.radiocsirt.org/vuln/ghsa-x9r7-5gw2-pphx https://cve.radiocsirt.org/vuln/gsd-2017-5255 gsd-2017-5255 https://cve.radiocsirt.org/vuln/gsd-2017-5255