https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 23:37:22 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-44351 cnvd-2020-44351 https://cve.radiocsirt.org/vuln/cnvd-2020-44351 https://cve.radiocsirt.org/vuln/euvd-2026-36773 EUVD-2026-36773 https://cve.radiocsirt.org/vuln/euvd-2026-36773 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5757 <p>Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM&#39;s &#34;New&#34; HTTPS API.</p> <p>Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM&#39;s &#34;New&#34; HTTPS API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-5757 https://cve.radiocsirt.org/vuln/ghsa-3f9w-43j6-x43v <p>Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM&#39;s &#34;New&#34; HTTPS API.</p> <p>Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM&#39;s &#34;New&#34; HTTPS API.</p> https://cve.radiocsirt.org/vuln/ghsa-3f9w-43j6-x43v https://cve.radiocsirt.org/vuln/gsd-2020-5757 gsd-2020-5757 https://cve.radiocsirt.org/vuln/gsd-2020-5757