https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:59:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-318058 EUVD-2026-318058 https://cve.radiocsirt.org/vuln/euvd-2026-318058 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42950 <p>ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user&#39;s web browser may become broken.</p> <p>ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user&#39;s web browser may become broken.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42950 https://cve.radiocsirt.org/vuln/ghsa-3f7h-8wg4-948w <p>ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user&#39;s web browser may become broken.</p> <p>ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user&#39;s web browser may become broken.</p> https://cve.radiocsirt.org/vuln/ghsa-3f7h-8wg4-948w https://cve.radiocsirt.org/vuln/jvndb-2026-000073 <p>Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/321.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/288.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/754.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/344.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Use of Hard-coded Cryptographic Key in creating backup of configuration files (CWE-321) - CVE-2026-25107&lt;/li&gt;&lt;li&gt;OS command injection in processing of ping_ip_addr parameter (CWE-78) - CVE-2026-35506&lt;/li&gt;&lt;li&gt;Missing authentication when accepting in specific URLs (CWE-288) - CVE-2026-40621&lt;/li&gt;&lt;li&gt;OS command injection in processing of username parameter (CWE-78) - CVE-2026-42062&lt;/li&gt;&lt;li&gt;Stored cross-site scripting due to inadequate hostname parameter handling (CWE-79) - CVE-2026-42948&lt;/li&gt;&lt;li&gt;Missing Check for language parameter (CWE-754) - CVE-2026-42950&lt;/li&gt;&lt;li&gt;Inadequate CSRF protection (CWE-344) - CVE-2026-42961&lt;/li&gt;&lt;/ul&gt;The vulnerabilities are reported from the following people, and JPCERT/CC coordinated with the developer. CVE-2026-25107, CVE-2026-42950, CVE-2026-42961 Kentaro Ishii of GMO Cybersecur…</p> <p>Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/321.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/288.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/754.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/344.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Use of Hard-coded Cryptographic Key in creating backup of configuration files (CWE-321) - CVE-2026-25107&lt;/li&gt;&lt;li&gt;OS command injection in processing of ping_ip_addr parameter (CWE-78) - CVE-2026-35506&lt;/li&gt;&lt;li&gt;Missing authentication when accepting in specific URLs (CWE-288) - CVE-2026-40621&lt;/li&gt;&lt;li&gt;OS command injection in processing of username parameter (CWE-78) - CVE-2026-42062&lt;/li&gt;&lt;li&gt;Stored cross-site scripting due to inadequate hostname parameter handling (CWE-79) - CVE-2026-42948&lt;/li&gt;&lt;li&gt;Missing Check for language parameter (CWE-754) - CVE-2026-42950&lt;/li&gt;&lt;li&gt;Inadequate CSRF protection (CWE-344) - CVE-2026-42961&lt;/li&gt;&lt;/ul&gt;The vulnerabilities are reported from the following people, and JPCERT/CC coordinated with the developer. CVE-2026-25107, CVE-2026-42950, CVE-2026-42961 Kentaro Ishii of GMO Cybersecur…</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000073