Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 23:37:23 +0000 cnvd-2020-44352 https://cve.radiocsirt.org/vuln/cnvd-2020-44352 cnvd-2020-44352 https://cve.radiocsirt.org/vuln/cnvd-2020-44352 EUVD-2026-36733 https://cve.radiocsirt.org/vuln/euvd-2026-36733 EUVD-2026-36733 https://cve.radiocsirt.org/vuln/euvd-2026-36733 fkie_cve-2020-5758 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5758 <p>Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a crafted HTTP GET to the UCM&#39;s &#34;Old&#34; HTTPS API.</p> <p>Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a crafted HTTP GET to the UCM&#39;s &#34;Old&#34; HTTPS API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-5758 GHSA-fc8w-q5c3-5m5f https://cve.radiocsirt.org/vuln/ghsa-fc8w-q5c3-5m5f <p>Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a crafted HTTP GET to the UCM&#39;s &#34;Old&#34; HTTPS API.</p> <p>Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a crafted HTTP GET to the UCM&#39;s &#34;Old&#34; HTTPS API.</p> https://cve.radiocsirt.org/vuln/ghsa-fc8w-q5c3-5m5f gsd-2020-5758 https://cve.radiocsirt.org/vuln/gsd-2020-5758 gsd-2020-5758 https://cve.radiocsirt.org/vuln/gsd-2020-5758