All CVEs — page 29 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

MEDIUM 6.1CVE-2026-1023722026-09-29
HIGH 7.3CVE-2026-101281public exploit available2026-09-29
HIGH 7.3CVE-2026-1012802026-09-29
MEDIUM 6.5CVE-2026-1012792026-09-29
MEDIUM 4.3CVE-2026-1012782026-09-29
MEDIUM 6.8CVE-2026-18747public exploit available2026-09-29
MEDIUM 5.9CVE-2026-18746public exploit available2026-09-29
MEDIUM 6.5CVE-2026-18417public exploit available2026-09-29
MEDIUM 5.4CVE-2026-102367public exploit available2026-09-29
MEDIUM 4.4CVE-2026-102366public exploit available2026-09-29
MEDIUM 6.5CVE-2026-102365public exploit available2026-09-29
MEDIUM 5.4CVE-2026-102364public exploit available2026-09-29
LOW 3.7CVE-2026-102363public exploit available2026-09-29
MEDIUM 5.3CVE-2026-102362public exploit available2026-09-29
CRITICAL 9.1CVE-2026-102361public exploit available2026-09-29
The flaw allows unauthenticated attackers to reset any storefront account password through the PUT /user/updatePwd endpoint, enabling account takeover and access to sensitive data.
MEDIUM 6.5CVE-2026-1012772026-09-29
LOW 3.1CVE-2026-1012652026-09-29
CRITICAL 9.1CVE-2026-101264public exploit available2026-09-29
The vulnerability allows command injection through the password1 argument in the /api/ZRnetwork/set_passwd endpoint, enabling remote attackers to execute arbitrary commands.
CRITICAL 9.1CVE-2026-101263public exploit available2026-09-29
A command injection vulnerability exists in Ziroom ZHOME A0101 1.0.1.0, allowing remote attackers to execute arbitrary commands via the mac argument.
HIGH 7.1CVE-2026-102335public exploit available2026-09-28
HIGH 7.4CVE-2026-102334public exploit available2026-09-28
MEDIUM 6.1CVE-2026-102333public exploit available2026-09-28
MEDIUM 6.1CVE-2026-102332public exploit available2026-09-28
CRITICAL 9.1CVE-2026-101262public exploit available2026-09-28
The vulnerability allows command injection through the manipulation of the 'ip' argument, enabling remote attackers to execute arbitrary commands on the server.
CRITICAL 9.1CVE-2026-101261public exploit available2026-09-28
The flaw allows command injection via manipulation of the login_pwd argument in the /api/ZRnetwork/firstSetup_wifi endpoint, enabling remote attackers to execute arbitrary commands.