Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 17:44:15 +0000 cnvd-2019-37730 https://cve.radiocsirt.org/vuln/cnvd-2019-37730 cnvd-2019-37730 https://cve.radiocsirt.org/vuln/cnvd-2019-37730 EUVD-2026-54863 https://cve.radiocsirt.org/vuln/euvd-2026-54863 EUVD-2026-54863 https://cve.radiocsirt.org/vuln/euvd-2026-54863 fkie_cve-2019-12148 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12148 <p>The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device&#39;s admin web portal without providing any credentials. This affects /var/webconfig/gui/Webconfig.inc.php.</p> <p>The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device&#39;s admin web portal without providing any credentials. This affects /var/webconfig/gui/Webconfig.inc.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12148 GHSA-g96f-3wfx-54p9 https://cve.radiocsirt.org/vuln/ghsa-g96f-3wfx-54p9 <p>The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device&#39;s admin web portal without providing any credentials. This affects /var/webconfig/gui/Webconfig.inc.php.</p> <p>The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device&#39;s admin web portal without providing any credentials. This affects /var/webconfig/gui/Webconfig.inc.php.</p> https://cve.radiocsirt.org/vuln/ghsa-g96f-3wfx-54p9 gsd-2019-12148 https://cve.radiocsirt.org/vuln/gsd-2019-12148 gsd-2019-12148 https://cve.radiocsirt.org/vuln/gsd-2019-12148