https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 09:22:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-275262 EUVD-2026-275262 https://cve.radiocsirt.org/vuln/euvd-2026-275262 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1571 <p>User-controlled input is reflected into the HTML output without proper encoding on TP-Link Archer C60 v3, allowing arbitrary JavaScript execution via a crafted URL. An attacker could run script in the device web UI context, potentially enabling credential theft, session hijacking, or unintended actions if a privileged user is targeted.</p> <p>User-controlled input is reflected into the HTML output without proper encoding on TP-Link Archer C60 v3, allowing arbitrary JavaScript execution via a crafted URL. An attacker could run script in the device web UI context, potentially enabling credential theft, session hijacking, or unintended actions if a privileged user is targeted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1571 https://cve.radiocsirt.org/vuln/ghsa-5vrw-6f4h-227q <p>User-controlled input is reflected into the HTML output without proper encoding on TP-Link Archer C60 v3, allowing arbitrary JavaScript execution via a crafted URL. An attacker could run script in the device web UI context, potentially enabling credential theft, session hijacking, or unintended actions if a privileged user is targeted.</p> <p>User-controlled input is reflected into the HTML output without proper encoding on TP-Link Archer C60 v3, allowing arbitrary JavaScript execution via a crafted URL. An attacker could run script in the device web UI context, potentially enabling credential theft, session hijacking, or unintended actions if a privileged user is targeted.</p> https://cve.radiocsirt.org/vuln/ghsa-5vrw-6f4h-227q