https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:22:00 +0000 https://cve.radiocsirt.org/vuln/cve-2026-50108 <p><strong>Affected:</strong> Naxclow Smart Doorbell X3, Naxclow X Smart Home, Naxclow V720, Naxclow ix cam</p> <p>The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifying that the requester is the legitimate device or owner. An actor able to present a platform-valid request signature can retrieve credentials for arbitrary devices and register on the relay as that device, enabling interception and disruption of its communications.</p> <p><strong>Affected:</strong> Naxclow Smart Doorbell X3, Naxclow X Smart Home, Naxclow V720, Naxclow ix cam</p> <p>The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifying that the requester is the legitimate device or owner. An actor able to present a platform-valid request signature can retrieve credentials for arbitrary devices and register on the relay as that device, enabling interception and disruption of its communications.</p> https://cve.radiocsirt.org/vuln/cve-2026-50108