Aggregator

Submit #736522 / VDB-342802

Submit #736513 / VDB-342801

A vulnerability identified as critical has been detected in Beetel 777VR1 up to 01.00.09/01.00.09_55. The affected element is an unknown function of the component UART Interface. This manipulation causes improper access controls. The identification of this vulnerability is CVE-2026-1411. It is feasible to perform the attack on the physical device. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability categorized as critical has been discovered in Beetel 777VR1 up to 01.00.09/01.00.09_55. Impacted is an unknown function of the component UART Interface. The manipulation results in missing authentication. This vulnerability was named CVE-2026-1410. An attack on the physical device is feasible. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Beetel 777VR1 up to 01.00.09/01.00.09_55. It has been rated as problematic. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. This vulnerability is uniquely identified as CVE-2026-1409. It is possible to launch the attack on the physical device. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Beetel 777VR1 up to 01.00.09/01.00.09_55. It has been declared as critical. This vulnerability affects unknown code of the component UART Interface. Executing a manipulation can lead to weak password requirements. This vulnerability is handled as CVE-2026-1408. The physical device can be targeted for the attack. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Beetel 777VR1 up to 01.00.09/01.00.09_55. It has been classified as problematic. This affects an unknown part of the component UART Interface. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2026-1407. The attack may be carried out on the physical device. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #740674 / VDB-342800

Submit #739433 / VDB-342799

Submit #739399 / VDB-342798

Submit #739384 / VDB-342797

Submit #736322 / VDB-342796

微软本月早些时候释出的例行安全更新堪称灾难，它带来的问题可能比解决的问题还要多，迫使软件巨人在一周内释出了两个紧急更新。在例行安全更新之后，微软于 1 月 17 日释出了一个紧急更新去修复 Windows 11 23H2 无法关机的问题以及无法远程登陆的问题。它在 1 月 24 日释出了第二个紧急更新，修复上一个更新导致 Outlook、OneDrive 和 Dropbox 等云端应用无法运行的问题。

Процессор 68000, 128 КБ ОЗУ и интерфейс, который сделал компьютер понятным людям.

A vulnerability, which was classified as critical, was found in Administrative Shortcodes Plugin up to 0.3.4 on WordPress. The affected element is the function get_template_part. Such manipulation leads to file inclusion. This vulnerability is uniquely identified as CVE-2026-1257. The attack can be launched remotely. No exploit exists.

A vulnerability identified as critical has been detected in AIKTP Plugin up to 5.0.04 on WordPress. This affects the function verify_user_logged_in of the file /aiktp/getToken of the component REST API Endpoint. Performing a manipulation results in missing authorization. This vulnerability is cataloged as CVE-2026-1103. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Canto Testimonials Plugin up to 1.0 on WordPress. Affected by this issue is the function fx of the component Shortcode Handler. The manipulation results in cross site scripting. This vulnerability is known as CVE-2026-1095. It is possible to launch the attack remotely. No exploit is available.