https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:41:59 +0000 https://cve.radiocsirt.org/vuln/cve-2026-29521 <p><strong>Affected:</strong> Shenzhen Hereta Technology Co., Ltd. Hereta ETH-IMC408M</p> <p>Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploiting missing CSRF protections in setup.cgi. Attackers can host malicious pages that submit forged requests using automatically-included HTTP Basic Authentication credentials to add RADIUS accounts, alter network settings, or trigger diagnostics.</p> <p><strong>Affected:</strong> Shenzhen Hereta Technology Co., Ltd. Hereta ETH-IMC408M</p> <p>Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploiting missing CSRF protections in setup.cgi. Attackers can host malicious pages that submit forged requests using automatically-included HTTP Basic Authentication credentials to add RADIUS accounts, alter network settings, or trigger diagnostics.</p> https://cve.radiocsirt.org/vuln/cve-2026-29521