https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:44:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-268182 EUVD-2026-268182 https://cve.radiocsirt.org/vuln/euvd-2026-268182 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2249 <p>METIS DFS devices (versions &lt;= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with &#39;daemon&#39; privileges. This results in the compromise of the software, granting unauthorized access to modify configuration, read and alter sensitive data, or disrupt services.</p> <p>METIS DFS devices (versions &lt;= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with &#39;daemon&#39; privileges. This results in the compromise of the software, granting unauthorized access to modify configuration, read and alter sensitive data, or disrupt services.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-2249 https://cve.radiocsirt.org/vuln/ghsa-3x5q-gxp5-wv27 <p>METIS DFS devices (versions &lt;= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with &#39;daemon&#39; privileges. This results in the compromise of the software, granting unauthorized access to modify configuration, read and alter sensitive data, or disrupt services.</p> <p>METIS DFS devices (versions &lt;= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with &#39;daemon&#39; privileges. This results in the compromise of the software, granting unauthorized access to modify configuration, read and alter sensitive data, or disrupt services.</p> https://cve.radiocsirt.org/vuln/ghsa-3x5q-gxp5-wv27