CVE Program partner

CERT-In

Indian Computer Emergency Response Team (CERT-In)

API
CVEs, 365 days31152 all time, 0 rejected
Quality98%median 99%
CVSS by the CNA100%share of records
CWE96%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationIndian Computer Emergency Response Team (CERT-In)
RoleCNA
TypeCERT
Reports tomitre
ScopeVulnerability coordination for vulnerabilities in all products reported to CERT-In in accordance with our vulnerability coordination role as a CERT. Vulnerability assignments for vulnerabilities impacting all products designed, developed, and manufactured in India.
Advisorieshttps://www.cert-in.org.in/

Latest CVEs · RSS

  • CVE-2026-107104 2026-10-07 · CVSS 9.3
    This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attac
  • CVE-2026-107103 2026-10-07 · CVSS 9.3
    This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated re
  • CVE-2026-107102 2026-10-07 · CVSS 9.3
    This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An
  • CVE-2026-85153 2026-10-06 · CVSS 9.3
    This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remot
  • CVE-2026-96515 2026-09-24 · CVSS 8.6
    This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import func
  • CVE-2026-84149 2026-09-01 · CVSS 9.2
    This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote at
  • CVE-2026-84148 2026-09-01 · CVSS 9.2
    This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker co
  • CVE-2026-84147 2026-09-01 · CVSS 10.0
    This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated
  • CVE-2026-19412 2026-08-28 · CVSS 8.7
    This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are id
  • CVE-2026-65894 2026-07-27 · CVSS 8.7
    This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by co
  • CVE-2026-65893 2026-07-27 · CVSS 7.0
    This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit
  • CVE-2026-9506 2026-06-08 · CVSS 8.7
    This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker
  • CVE-2026-45433 2026-06-04 · CVSS 8.7
    This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could explo
  • CVE-2026-45432 2026-06-04 · CVSS 8.7
    This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote at
  • CVE-2026-45431 2026-06-04 · CVSS 8.7
    This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interfac
  • CVE-2026-9274 2026-05-25 · CVSS 5.2
    This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could
  • CVE-2026-42518 2026-04-29 · CVSS 8.7
    This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript. An unauthenticate
  • CVE-2026-42517 2026-04-29 · CVSS 7.1
    This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this
  • CVE-2026-42516 2026-04-29 · CVSS 7.1
    This vulnerability exists in e-Sushrut due to improper authorization checks during resource access. An authenticated attacker could exploit this vulnerability b
  • CVE-2026-42515 2026-04-29 · CVSS 7.1
    This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability
  • CVE-2026-42514 2026-04-29 · CVSS 8.8
    This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses. A remote attacker could exploit this vulnerability by intercep
  • CVE-2026-42513 2026-04-29 · CVSS 8.8
    This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status. A
  • CVE-2026-41039 2026-04-21 · CVSS 8.7
    This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface. An
  • CVE-2026-41038 2026-04-21 · CVSS 7.6
    This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface. An attacker o
  • CVE-2026-41036 2026-04-21 · CVSS 8.7
    This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated rem

All CVE Program partners