https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:47:46 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-03176 cnvd-2026-03176 https://cve.radiocsirt.org/vuln/cnvd-2026-03176 https://cve.radiocsirt.org/vuln/euvd-2026-263611 EUVD-2026-263611 https://cve.radiocsirt.org/vuln/euvd-2026-263611 https://cve.radiocsirt.org/vuln/fkie_cve-2025-36754 <p>The authentication mechanism on web interface is not properly implemented. It is possible to bypass authentication checks by crafting a post request with new settings since there is no session token or authentication in place. This would allow an attacker for instance to point the device to an arbitrary address for domain name resolution to e.g. facililitate a man-in-the-middle (MitM) attack.</p> <p>The authentication mechanism on web interface is not properly implemented. It is possible to bypass authentication checks by crafting a post request with new settings since there is no session token or authentication in place. This would allow an attacker for instance to point the device to an arbitrary address for domain name resolution to e.g. facililitate a man-in-the-middle (MitM) attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-36754 https://cve.radiocsirt.org/vuln/ghsa-227r-vmhh-jq3x <p>The authentication mechanism on web interface is not properly implemented. It is possible to bypass authentication checks by crafting a post request with new settings since there is no session token or authentication in place. This would allow an attacker for instance to point the device to an arbitrary address for domain name resolution to e.g. facililitate a man-in-the-middle (MitM) attack.</p> <p>The authentication mechanism on web interface is not properly implemented. It is possible to bypass authentication checks by crafting a post request with new settings since there is no session token or authentication in place. This would allow an attacker for instance to point the device to an arbitrary address for domain name resolution to e.g. facililitate a man-in-the-middle (MitM) attack.</p> https://cve.radiocsirt.org/vuln/ghsa-227r-vmhh-jq3x