Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-42020 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-G... | 2026-10-28 |
| CVE-2026-42019 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-G... | 2026-10-28 |
| CVE-2026-41223 | critical | 9.1 | No | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-G... | 2026-10-28 |
| CVE-2026-41222 | critical | 9.1 | No | A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-... | 2026-10-28 |
| CVE-2026-40627 | critical | 9.1 | No | An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B202... | 2026-10-28 |
| CVE-2026-40615 | critical | 9.1 | No | A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X20... | 2026-10-28 |
| CVE-2026-33568 | critical | 9.1 | No | A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.... | 2026-10-28 |
| CVE-2026-28763 | critical | 9.1 | No | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R... | 2026-10-28 |
| CVE-2026-114357 | not reported | — | No | Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through... | 2026-10-28 |
| CVE-2026-114356 | not reported | — | No | Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Andr... | 2026-10-28 |
| CVE-2026-114355 | not reported | — | No | OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android... | 2026-10-28 |
| CVE-2026-114354 | not reported | — | No | Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firmware v0.3.9.7 t... | 2026-10-28 |
| CVE-2026-114353 | not reported | — | No | Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0... | 2026-10-28 |
| CVE-2026-112407 | high | 8.8 | No | Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authen... | 2026-10-28 |
| CVE-2026-112188 | not reported | — | No | MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration... | 2026-10-28 |
| CVE-2026-10632 | high | 8.7 | No | A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an attacker to inject Ja... | 2026-10-28 |
| CVE-2026-109682 | medium | 4.7 | No | Metasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to follow redirects to a different host withou... | 2026-10-28 |
| CVE-2026-109681 | medium | 4.7 | No | The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can sp... | 2026-10-28 |
| CVE-2025-58403 | not reported | — | No | CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data. A remote unauthenti... | 2026-10-28 |
| CVE-2025-30054 | not reported | — | No | CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but du... | 2026-10-28 |