<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 05:40:30 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-6521 — TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2025-6521</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; TrendMakers Sight Bulb Pro Firmware ZJ_CG32-2201&lt;/p&gt;
&lt;p&gt;During the initial setup of the device the user connects to an access 
point broadcast by the Sight Bulb Pro. During the negotiation, AES 
Encryption keys are passed in cleartext. If captured, an attacker may be
 able to decrypt communications between the management app and the Sight
 Bulb Pro which may include sensitive information such as network 
credentials.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; TrendMakers Sight Bulb Pro Firmware ZJ_CG32-2201&lt;/p&gt;
&lt;p&gt;During the initial setup of the device the user connects to an access 
point broadcast by the Sight Bulb Pro. During the negotiation, AES 
Encryption keys are passed in cleartext. If captured, an attacker may be
 able to decrypt communications between the management app and the Sight
 Bulb Pro which may include sensitive information such as network 
credentials.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2025-6521</guid>
    </item>
  </channel>
</rss>
