https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:07:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-325170 EUVD-2026-325170 https://cve.radiocsirt.org/vuln/euvd-2026-325170 https://cve.radiocsirt.org/vuln/fkie_cve-2025-71317 <p>NetMan 204 contains a hard-coded backdoor account with the username and password &#39;eurek&#39; that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&amp;password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrator privileges, allowing them to alter device configuration, enable the telnet/SSH services, and reset local user credentials.</p> <p>NetMan 204 contains a hard-coded backdoor account with the username and password &#39;eurek&#39; that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&amp;password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrator privileges, allowing them to alter device configuration, enable the telnet/SSH services, and reset local user credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-71317 https://cve.radiocsirt.org/vuln/ghsa-w87w-x2c9-f3pw <p>NetMan 204 contains a hard-coded backdoor account with the username and password &#39;eurek&#39; that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&amp;password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrator privileges, allowing them to alter device configuration, enable the telnet/SSH services, and reset local user credentials.</p> <p>NetMan 204 contains a hard-coded backdoor account with the username and password &#39;eurek&#39; that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&amp;password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrator privileges, allowing them to alter device configuration, enable the telnet/SSH services, and reset local user credentials.</p> https://cve.radiocsirt.org/vuln/ghsa-w87w-x2c9-f3pw