https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:04:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-228060 EUVD-2026-228060 https://cve.radiocsirt.org/vuln/euvd-2026-228060 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25213 <p>Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT &#39;AC-WPS-11ac series&#39;. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed.</p> <p>Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT &#39;AC-WPS-11ac series&#39;. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-25213 https://cve.radiocsirt.org/vuln/ghsa-fw33-w47w-wxm4 <p>Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT &#39;AC-WPS-11ac series&#39;. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed.</p> <p>Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT &#39;AC-WPS-11ac series&#39;. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed.</p> https://cve.radiocsirt.org/vuln/ghsa-fw33-w47w-wxm4 https://cve.radiocsirt.org/vuln/jvndb-2025-002990 <p>Wi-Fi AP UNIT &#39;AC-WPS-11ac series&#39; provided by Inaba Denki Sangyo Co., Ltd. contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;Incorrect privilege assignment in the WEB UI (the setting page) (CWE-266)&lt;/b&gt; - CVE-2025-23407&lt;/li&gt; &lt;li&gt;&lt;b&gt;OS command injection in the WEB UI (the setting page) (CWE-78)&lt;/b&gt; - CVE-2025-25053&lt;/li&gt; &lt;li&gt;&lt;b&gt;Cross-site request forgery (CWE-352)&lt;/b&gt; - CVE-2025-25056&lt;/li&gt; &lt;li&gt;&lt;b&gt;Improper restriction of rendered UI layers or frames (CWE-1021)&lt;/b&gt; - CVE-2025-25213&lt;/li&gt; &lt;li&gt;&lt;b&gt;Cleartext transmission of sensitive information (CWE-319)&lt;/b&gt; - CVE-2025-27722&lt;/li&gt; &lt;li&gt;&lt;b&gt;OS command injection in the specific service (CWE-78)&lt;/b&gt; - CVE-2025-27797&lt;/li&gt; &lt;li&gt;&lt;b&gt;Information disclosure of authentication information in the specific service (CWE-497)&lt;/b&gt; - CVE-2025-27934&lt;/li&gt; &lt;li&gt;&lt;b&gt;Missing authentication for critical function (CWE-306)&lt;/b&gt; - CVE-2025-29870&lt;/li&gt; &lt;/ul&gt; Inaba Denki Sangyo Co., Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.</p> <p>Wi-Fi AP UNIT &#39;AC-WPS-11ac series&#39; provided by Inaba Denki Sangyo Co., Ltd. contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;Incorrect privilege assignment in the WEB UI (the setting page) (CWE-266)&lt;/b&gt; - CVE-2025-23407&lt;/li&gt; &lt;li&gt;&lt;b&gt;OS command injection in the WEB UI (the setting page) (CWE-78)&lt;/b&gt; - CVE-2025-25053&lt;/li&gt; &lt;li&gt;&lt;b&gt;Cross-site request forgery (CWE-352)&lt;/b&gt; - CVE-2025-25056&lt;/li&gt; &lt;li&gt;&lt;b&gt;Improper restriction of rendered UI layers or frames (CWE-1021)&lt;/b&gt; - CVE-2025-25213&lt;/li&gt; &lt;li&gt;&lt;b&gt;Cleartext transmission of sensitive information (CWE-319)&lt;/b&gt; - CVE-2025-27722&lt;/li&gt; &lt;li&gt;&lt;b&gt;OS command injection in the specific service (CWE-78)&lt;/b&gt; - CVE-2025-27797&lt;/li&gt; &lt;li&gt;&lt;b&gt;Information disclosure of authentication information in the specific service (CWE-497)&lt;/b&gt; - CVE-2025-27934&lt;/li&gt; &lt;li&gt;&lt;b&gt;Missing authentication for critical function (CWE-306)&lt;/b&gt; - CVE-2025-29870&lt;/li&gt; &lt;/ul&gt; Inaba Denki Sangyo Co., Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-002990