deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-10960
Published: 2025-09-25
Description: A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The impacted element is the function sub_402D1C of the file /cgi-bin/wireless.cgi of the component DeleteMac Page. Performing manipulation of the argument delete_list results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/DeleteMac.md; https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/DeleteMac.md#poc; https://vuldb.com/?ctiid.325828
CVE: CVE-2025-10961
Published: 2025-09-25
Description: A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. This affects the function sub_4030C0 of the file /cgi-bin/wireless.cgi of the component Delete_Mac_list Page. Executing manipulation of the argument delete_list can lead to command injection. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/Delete_Mac_list.md; https://vuldb.com/?ctiid.325829; https://vuldb.com/?id.325829
CVE: CVE-2025-29155
Published: 2025-09-25
Description: An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://gist.github.com/HouqiyuA/4efd1aac7c7c7ab0cd5db48d62541a74; https://github.com/swagger-api/swagger-petstore; https://github.com/swagger-api/swagger-petstore/blob/master/src/main/resources/openapi.yaml
CVE: CVE-2025-48707
Published: 2025-09-25
Description: An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://advisories.stormshield.eu/2025-003/
CVE: CVE-2025-57623
Published: 2025-09-25
Description: A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to cause a Denial of Service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://gist.github.com/z472421519/d17061ea79a72d39fe69c000fa1a6280; https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/TOTOLink/CONTENT_LENGTH.md
CVE: CVE-2025-60249
Published: 2025-09-25
Description: vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a vulnerability-lookup instance who can add bundles, comments, or sightings. A cross-site scripting (XSS) vulnerability was discovered in the handling of user-supplied input in the Bundles, Comments, and Sightings components. Untrusted data was not properly sanitized before being rendered in templates and tables, which could allow attackers to inject arbitrary JavaScript into the application. The issue was due to unsafe use of innerHTML and insufficient validation of dynamic URLs and model fields. This vulnerability has been fixed by escaping untrusted data, replacing innerHTML assignments with safer DOM methods, encoding URLs with encodeURIComponent, and improving input validation in the affected models.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/vulnerability-lookup/vulnerability-lookup/commit/afa12347f1461d9481eba75ac19897e80a9c7434
CVE: CVE-2025-10962
Published: 2025-09-25
Description: A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This impacts the function sub_403198 of the file /cgi-bin/wireless.cgi of the component SetName Page. The manipulation of the argument mac_5g leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/SetName.md; https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/SetName.md#poc; https://vuldb.com/?ctiid.325830
CVE: CVE-2025-10963
Published: 2025-09-25
Description: A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. Affected is the function sub_4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument del_flag results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/singlePortForwardDelete.md; https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/singlePortForwardDelete.md#poc; https://vuldb.com/?ctiid.325831
CVE: CVE-2025-29156
Published: 2025-09-25
Description: Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/HouqiyuA/9d2c3f0ba075d01631aff879546e419c; https://github.com/swagger-api/swagger-petstore/blob/master/src/main/resources/openapi.yaml; https://www.google.com/url?q=https%3A%2F%2Fgithub.com%2Fswagger-api%2Fswagger-petstore&sa=D&sntz=1&usg=AOvVaw0bPYxOZ-XKNAbTj4h0EOMD
CVE: CVE-2025-29157
Published: 2025-09-25
Description: An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name (default) and server version
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://gist.github.com/HouqiyuA/3c36f78e8de9f6a3cfb0959477c07443; https://github.com/swagger-api/swagger-petstore; https://petstore3.swagger.io/#/pet/updatePet
CVE: CVE-2025-10964
Published: 2025-09-25
Description: A weakness has been identified in Wavlink NU516U1. Affected by this vulnerability is the function sub_401B30 of the file /cgi-bin/firewall.cgi. This manipulation of the argument remoteManagementEnabled causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md; https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md#poc; https://vuldb.com/?ctiid.325832
CVE: CVE-2025-10965
Published: 2025-09-25
Description: A security vulnerability has been detected in LazyAGI LazyLLM up to 0.6.1. Affected by this issue is the function lazyllm_call of the file lazyllm/components/deploy/relay/server.py. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-502
References: https://github.com/LazyAGI/LazyLLM/issues/764; https://vuldb.com/?ctiid.325833; https://vuldb.com/?id.325833
CVE: CVE-2025-10967
Published: 2025-09-25
Description: A vulnerability was detected in MuFen-mker PHP-Usermm up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9. This affects an unknown part of the file /chkuser.php. Performing manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/Miker132/CVE-/issues/3; https://vuldb.com/?ctiid.325834; https://vuldb.com/?id.325834
CVE: CVE-2025-43816
Published: 2025-09-25
Description: A memory leak in the headless API for StructuredContents in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2024.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows an attacker to cause server unavailability (denial of service) via repeatedly calling the API endpoint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43816
CVE: CVE-2025-43993
Published: 2025-09-25
Description: Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://www.dell.com/support/kbdoc/en-us/000372605/dsa-2025-363
CVE: CVE-2025-57632
Published: 2025-09-25
Description: libsmb2 6.2+ is vulnerable to Buffer Overflow. When processing SMB2 chained PDUs (NextCommand), libsmb2 repeatedly calls smb2_add_iovector() to append to a fixed-size iovec array without checking the upper bound of v->niov (SMB2_MAX_VECTORS=256). An attacker can craft responses with many chained PDUs to overflow v->niov and perform heap out-of-bounds writes, causing memory corruption, crashes, and potentially arbitrary code execution. The SMB2_OPLOCK_BREAK path bypasses message ID validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://gist.github.com/ZjW1nd/0b95b63307ceee7890e88e4abc6f041e; https://github.com/sahlberg/libsmb2; https://github.com/sahlberg/libsmb2/blob/master/lib/compat.c#L569
CVE: CVE-2025-59814
Published: 2025-09-25
Description: This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System; https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes
CVE: CVE-2025-59815
Published: 2025-09-25
Description: This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity.
CVSS Score: 8.4 (HIGH)
CWE: CWE-77
References: https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System; https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes
CVE: CVE-2025-59816
Published: 2025-09-25
Description: This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System; https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes
CVE: CVE-2025-59817
Published: 2025-09-25
Description: This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity.
CVSS Score: 8.4 (HIGH)
CWE: CWE-77
References: https://wiki.zenitel.com/wiki/Downloads#Stations_and_Devices
CVE: CVE-2025-10973
Published: 2025-09-25
Description: A flaw has been found in JackieDYH Resume-management-system up to fb6b857d852dd796e748ce30c606fe5e61c18273. Affected by this issue is some unknown functionality of the file /admin/show.php. This manipulation of the argument userid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/Miker132/CVE-/issues/5; https://vuldb.com/?ctiid.325844; https://vuldb.com/?id.325844
CVE: CVE-2025-11005
Published: 2025-09-25
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/blob/main/2025/PANW-2025-0005/PANW-2025-0005.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/247/ids/36.html
CVE: CVE-2025-26482
Published: 2025-09-25
Description: Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1258
References: https://www.dell.com/support/kbdoc/en-us/000370138/dsa-2025-046-security-update-for-dell-poweredge-server-and-dell-idrac9-for-information-disclosure-vulnerability
CVE: CVE-2025-59402
Published: 2025-09-25
Description: Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-616
References: https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-safetys-bravo-compute-box/; https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf; https://www.flocksafety.com/products
CVE: CVE-2025-59404
Published: 2025-09-25
Description: Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot (AVB) and allows direct modification of partitions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1274
References: https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-safetys-bravo-compute-box/; https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf; https://www.flocksafety.com/products
CVE: CVE-2025-59408
Published: 2025-09-25
Description: Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections.
CVSS Score: 7.3 (HIGH)
CWE: CWE-327
References: https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-safetys-bravo-compute-box/; https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf; https://www.flocksafety.com/products
CVE: CVE-2025-10974
Published: 2025-09-25
Description: A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument body_parts/point_cloud leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-502
References: https://github.com/giantspatula/SewKinect/issues/3; https://github.com/giantspatula/SewKinect/issues/3#issue[PII_REDACTED]; https://vuldb.com/?ctiid.325845
CVE: CVE-2025-10975
Published: 2025-09-25
Description: A vulnerability was found in GuanxingLu vlarl up to 31abc0baf53ef8f5db666a1c882e1ea64def2997. This vulnerability affects the function experiments.robot.bridge.reasoning_server::run_reasoning_server of the file experiments/robot/bridge/reasoning_server.py of the component ZeroMQ. Performing manipulation of the argument Message results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-502
References: https://github.com/GuanxingLu/vlarl/issues/18; https://github.com/GuanxingLu/vlarl/issues/18#issue[PII_REDACTED]; https://vuldb.com/?ctiid.325846
CVE: CVE-2025-10976
Published: 2025-09-25
Description: A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.1 (LOW)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.325847; https://vuldb.com/?id.325847; https://vuldb.com/?submit.653333
CVE: CVE-2025-10977
Published: 2025-09-25
Description: A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.1 (LOW)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.325848; https://vuldb.com/?id.325848; https://vuldb.com/?submit.653335
CVE: CVE-2025-10978
Published: 2025-09-25
Description: A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.325849; https://vuldb.com/?id.325849; https://vuldb.com/?submit.653336
CVE: CVE-2025-10979
Published: 2025-09-25
Description: A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.325850; https://vuldb.com/?id.325850; https://vuldb.com/?submit.653337
CVE: CVE-2025-56769
Published: 2025-09-25
Description: An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://github.com/chinabugotech/hutool/issues/3994
CVE: CVE-2025-10980
Published: 2025-09-26
Description: A security vulnerability has been detected in JeecgBoot up to 3.8.2. This affects an unknown function of the file /sys/position/exportXls. Such manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.325851; https://vuldb.com/?id.325851; https://vuldb.com/?submit.653340
CVE: CVE-2025-10981
Published: 2025-09-26
Description: A vulnerability was detected in JeecgBoot up to 3.8.2. This impacts an unknown function of the file /sys/tenant/exportXls. Performing manipulation results in improper authorization. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.325852; https://vuldb.com/?id.325852; https://vuldb.com/?submit.653341
CVE: CVE-2025-10987
Published: 2025-09-26
Description: A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of the file /crm/contact/transfer of the component HTTP Request Handler. This manipulation of the argument contactId causes improper authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.325910; https://vuldb.com/?id.325910; https://vuldb.com/?submit.653735
CVE: CVE-2025-10988
Published: 2025-09-26
Description: A vulnerability was identified in YunaiV ruoyi-vue-pro up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Such manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.325911; https://vuldb.com/?id.325911; https://vuldb.com/?submit.653736
CVE: CVE-2025-10989
Published: 2025-09-26
Description: A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Performing manipulation of the argument userIds results in improper authorization. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.325912; https://vuldb.com/?id.325912; https://vuldb.com/?submit.653737
CVE: CVE-2025-60017
Published: 2025-09-26
Description: Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and restart_wifi_sta).
CVSS Score: 8.2 (HIGH)
CWE: CWE-78
References: https://github.com/Bin4ry/UniPwn; https://news.ycombinator.com/item?id=45381590; https://spectrum.ieee.org/unitree-robot-exploit
CVE: CVE-2025-60250
Published: 2025-09-26
Description: Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-321
References: https://github.com/Bin4ry/UniPwn; https://news.ycombinator.com/item?id=45381590; https://spectrum.ieee.org/unitree-robot-exploit
CVE: CVE-2025-60251
Published: 2025-09-26
Description: Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret with the unitree substring.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-306
References: https://github.com/Bin4ry/UniPwn; https://news.ycombinator.com/item?id=45381590; https://spectrum.ieee.org/unitree-robot-exploit