rainbutterfly/cve_corpus huggingface dataset:
CVE-2026-25655 
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-privileged user.
This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with administrative privilege.(ZDI-CAN-28107)
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: Siemens
product: SINEC NMS
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
baseScore: 7.8
baseSeverity: HIGH
Published: 2026-02-10T09:58:54.129Z
CVE-2026-25656 
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user.
This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: Siemens
product: SINEC NMS
default_status: unknown
vendor: Siemens
product: User Management Component (UMC)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
baseScore: 7.8
baseSeverity: HIGH
Published: 2026-02-10T09:58:55.243Z
CVE-2026-25657 Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability
Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Problem types: cwe_id: CWE-228
description: CWE-228
Affected products: vendor: Ericsson
product: Packet Core Gateway (PCG)
default_status: affected
Credits: lang: en
value: Clemens Keil, Manfred Heinz, Patrick Walker of BDO Cyber Security GmbH
lang: en
value: BSI 5G/6G Security Lab TEMIS (Federal Office for Information Security, Germany)
Published: 2026-06-05T11:03:02.273Z
CVE-2026-25658 Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
Ericsson
Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling
of Missing Values (CWE-230) vulnerability where an attacker continuously
sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Problem types: cwe_id: CWE-230
description: CWE-230 Improper handling of missing values
Affected products: vendor: Ericsson
product: Packet Core Gateway (PCG)
default_status: affected
Credits: lang: en
value: Clemens Keil, Manfred Heinz, Patrick Walker of BDO Cyber Security GmbH
lang: en
value: BSI 5G/6G Security Lab TEMIS (Federal Office for Information Security, Germany)
Published: 2026-06-05T11:06:27.504Z
CVE-2026-25659 Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
Ericsson
Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling
of Missing Values (CWE-230) vulnerability where an attacker continuously
sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Problem types: cwe_id: CWE-230
description: CWE-230 Improper handling of missing values
Affected products: vendor: Ericsson
product: Packet Core Gateway (PCG)
default_status: affected
Credits: lang: en
value: Clemens Keil, Manfred Heinz, Patrick Walker of BDO Cyber Security GmbH
lang: en
value: BSI 5G/6G Security Lab TEMIS (Federal Office for Information Security, Germany)
Published: 2026-06-05T11:08:39.929Z
CVE-2026-25660 Authentication bypass for certain API calls
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. 
Authentication bypass occurs when the URL ends with Authentication with certain function calls.  This bypass allows assigning arbitrary permission to any user existing in CodeChecker.

This issue affects CodeChecker: through 6.27.3.
Problem types: cwe_id: CWE-290
description: CWE-290 Authentication bypass by spoofing
cwe_id: CWE-863
description: CWE-863 Incorrect Authorization
Affected products: vendor: Ericsson
product: CodeChecker
default_status: unaffected
Credits: lang: en
value: Scott Tolley
Published: 2026-04-24T13:10:26.171Z
CVE-2026-25667 
ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, because of an incorrect exit condition for HTTP/3 Encoder/Decoder stream processing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-03-19T00:00:00.000Z
CVE-2026-25673 Potential denial-of-service vulnerability in URLField via Unicode normalization on Windows
An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.
`URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode characters, allowing a remote attacker to cause denial of service via large URL inputs containing these characters.
Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.
Django would like to thank Seokchan Yoon for reporting this issue.
Problem types: cwe_id: CWE-400
description: CWE-400: Uncontrolled Resource Consumption
Affected products: vendor: djangoproject
product: Django
default_status: unaffected
Credits: lang: en
value: Seokchan Yoon
lang: en
value: Natalia Bidart
lang: en
value: Natalia Bidart
Published: 2026-03-03T14:28:28.601Z
CVE-2026-25674 Potential incorrect permissions on newly created file system objects
An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.
Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's temporary `umask` change affects other threads in multi-threaded environments.
Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.
Django would like to thank Tarek Nakkouch for reporting this issue.
Problem types: cwe_id: CWE-362
description: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products: vendor: djangoproject
product: Django
default_status: unaffected
Credits: lang: en
value: Tarek Nakkouch
lang: en
value: Natalia Bidart
lang: en
value: Natalia Bidart
Published: 2026-03-03T14:28:37.751Z
CVE-2026-25676 
The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges.
Problem types: cwe_id: CWE-427
description: Uncontrolled Search Path Element
Affected products: vendor: M-Audio
product: M-Track Duo HD
Published: 2026-02-12T04:26:04.933Z
CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Problem types: description: CWE-1286: Improper Validation of Syntactic Correctness of Input
Affected products: vendor: Go standard library
product: net/url
default_status: unaffected
Credits: lang: en
value: Masaki Hara (https://github.com/qnighy) of Wantedly
Published: 2026-03-06T21:28:14.211Z
CVE-2026-25680 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
Problem types: description: CWE-407: Inefficient Algorithmic Complexity
Affected products: vendor: golang.org/x/net
product: golang.org/x/net/html
default_status: unaffected
Credits: lang: en
value: IPC Labs
Published: 2026-05-22T15:01:21.805Z
CVE-2026-25681 Invoking  incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
Problem types: description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: golang.org/x/net
product: golang.org/x/net/html
default_status: unaffected
Credits: lang: en
value: ensy
Published: 2026-05-22T15:01:21.975Z
CVE-2026-25689 
An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 all versions, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions, FortiDeceptor 4.3 all versions, FortiDeceptor 4.2 all versions, FortiDeceptor 4.1 all versions, FortiDeceptor 4.0 all versions may allow a privileged attacker with super-admin profile and CLI access to delete sensitive files via crafted HTTP requests.
Problem types: cwe_id: CWE-88
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiDeceptor
cpes: cpe:2.3:a:fortinet:fortideceptor:6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.2.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:4.3.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:4.0.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C
Published: 2026-03-10T16:44:15.347Z
CVE-2026-25690 
An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2.0 through 5.2.1, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with at least read-only admin permission to read log files via HTTP crafted requests.
Problem types: cwe_id: CWE-88
description: Information disclosure
Affected products: vendor: Fortinet
product: FortiDeceptor
cpes: cpe:2.3:a:fortinet:fortideceptor:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.0.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C
Published: 2026-05-12T16:54:10.546Z
CVE-2026-25691 
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to delete an arbitrary directory via HTTP crafted requests.
Problem types: cwe_id: CWE-22
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiSandbox PaaS
cpes: cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*
default_status: unaffected
vendor: Fortinet
product: FortiSandbox Cloud
cpes: cpe:2.3:a:fortinet:fortisandboxcloud:5.0.4:*:*:*:*:*:*:*
default_status: unaffected
vendor: Fortinet
product: FortiSandbox
cpes: cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H/E:F/RL:O/RC:C
Published: 2026-04-14T15:38:16.406Z
CVE-2026-25701 
An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like:
  *  gain access to possible private information found in /var/lib/pcrlock.d
  *  manipulate the data backed up in /tmp/pcrlock.d.bak, therefore violating the integrity of the data should it be restored.
  *   overwrite protected system files with data from /var/lib/pcrlock.d by placing symlinks to existing files in the directory tree in /tmp/pcrlock.d.bak.


This issue affects sdbootutil: from ? before 5880246d3a02642dc68f5c8cb474bf63cdb56bca.
Problem types: cwe_id: CWE-377
description: CWE-377: Insecure Temporary File
Affected products: vendor: openSUSE
product: sdbootutil
default_status: unaffected
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2026-02-25T10:59:58.372Z
CVE-2026-25702 nftables disabled due to incorrect kernel backport
A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: SUSE
product: SUSE Linux Enterprise Server
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Published: 2026-03-05T07:00:18.627Z
CVE-2026-25704 Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in  cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic.




This issue affects cosmic-greeter before https://github.Com/pop-os/cosmic-greeter/pull/426.
Problem types: cwe_id: CWE-271
description: CWE-271: Privilege Dropping / Lowering Errors
cwe_id: CWE-367
description: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: pop-os
product: cosmic-greeter
default_status: unaffected
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2026-03-30T07:44:39.672Z
CVE-2026-25705 Rancher Extensions have arbitrary file access via path traversal
A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher through a path traversal in the `compressedEndpoint` field inside a `UIPlugin` deployment. A malicious UI extension could abuse that to:  *  Overwrite Rancher binaries or configuration to inject code.

  *  Write to /var/lib/rancher/ to tamper with cluster state.

  *  If hostPath volumes are mounted, write to the host node filesystem.

  *  Use this issue to chain with other attack vectors.
Problem types: cwe_id: CWE-35
description: CWE-35 Path traversal: '.../...//'
Affected products: vendor: SUSE
product: rancher
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 8.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Credits: lang: en
value: https://github.com/KoreaSecurity
Published: 2026-05-13T08:00:46.097Z
CVE-2026-25710 
The new upstream added a privileged D-Bus
helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the system.
Problem types: cwe_id: CWE-250
description: CWE-250: Execution with Unnecessary Privileges
Affected products: vendor: KDE
product: plasma-login-manager
default_status: unaffected
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2026-05-13T08:44:00.951Z
CVE-2026-25711 Chargemap chargemap.com Insufficient Session Expiration
The WebSocket backend uses charging station identifiers to uniquely 
associate sessions but allows multiple endpoints to connect using the 
same session identifier. This implementation results in predictable 
session identifiers and enables session hijacking or shadowing, where 
the most recent connection displaces the legitimate charging station and
 receives backend commands intended for that station. This vulnerability
 may allow unauthorized users to authenticate as other users or enable a
 malicious actor to cause a denial-of-service condition by overwhelming 
the backend with valid session requests.
Problem types: cwe_id: CWE-613
description: CWE-613
Affected products: vendor: Chargemap
product: chargemap.com
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Khaled Sarieddine and Mohammad Ali Sayed reported this vulnerability to CISA
Published: 2026-02-26T23:08:22.088Z
CVE-2026-25713 
MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: MediaArea
product: MediaInfoLib
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Credits: lang: en
value: Discovered by Dimitrios Tatsis of Cisco TALOS
Published: 2026-05-26T08:39:55.488Z
CVE-2026-25715 Jinan USR IOT Technology Limited (PUSR) USR-W610 Weak Password Requirements
The web management interface of the device allows the administrator 
username and password to be set to blank values. Once applied, the 
device permits authentication with empty credentials over the web 
management interface and Telnet service. This effectively disables 
authentication across all critical management channels, allowing any 
network-adjacent attacker to gain full administrative control without 
credentials.
Problem types: cwe_id: CWE-521
description: CWE-521
Affected products: vendor: Jinan USR IOT Technology Limited (PUSR)
product: USR-W610
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Abhishek Pandey of Payatu Security Consulting reported this to CISA.
Published: 2026-02-20T15:56:16.805Z
CVE-2026-25720 SenseLive X3050 Insufficient session expiration
A vulnerability exists in SenseLive

X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requiring re-authentication. An attacker with access to a previously authenticated session could continue interacting with administrative functions long after legitimate user activity has ceased.
Problem types: cwe_id: CWE-613
description: CWE-613 Insufficient session expiration
Affected products: vendor: SenseLive
product: X3050
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Credits: lang: en
value: Jithin Nambiar J reported these vulnerabilities to CISA.
Published: 2026-04-23T23:48:16.663Z