runZero

Latest CVEs · RSS

• CVE-2026-65200 2026-10-13 · CVSS 3.5
  The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transpor
• CVE-2026-65199 2026-10-13 · CVSS 5.4
  openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapp
• CVE-2026-65198 2026-10-13 · CVSS 8.6
  Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the op
• CVE-2026-65197 2026-10-13 · CVSS 3.1
  H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`. That file is writable by
• CVE-2026-16141 2026-09-15 · CVSS 8.1
  OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return befor
• CVE-2026-16140 2026-09-15 · CVSS 8.8
  OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a t
• CVE-2026-81846 2026-09-01 · CVSS 3.5
  An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0. This issue is an instance of CWE-639: Authorization Bypas
• CVE-2026-6688 2026-07-01 · CVSS 7.6
  FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling. With LFN enabled, fno.fname can be up t
• CVE-2026-6687 2026-07-01 · CVSS 7.6
  FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted without enforcing spec maximums. Thi
• CVE-2026-6686 2026-07-01 · CVSS 4.6
  FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF without zero-filling newly allocated clusters. This m
• CVE-2026-6684 2026-07-01 · CVSS 4.6
  FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived from GPT header field GPTH_PtNum, enablin
• CVE-2026-6683 2026-07-01 · CVSS 4.6
  FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to be zero during write/sync operations. Thi
• CVE-2026-6682 2026-07-01 · CVSS 7.6
  In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to attacker-controlled file-size
• CVE-2026-10303 2026-06-16 · CVSS 7.4
  In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in chal
• CVE-2026-50091 2026-06-12 · CVSS 9.1
  Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is a
• CVE-2026-50090 2026-06-12 · CVSS 9.3
  The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, whic
• CVE-2026-50089 2026-06-12 · CVSS 6.1
  The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estima
• CVE-2026-50088 2026-06-12 · CVSS 8.2
  The Aqara Developer Portal (developer.aqara.com) and shared test environments (developer-test.aqara.com, aiot-test.aqara.com) exhibit cross-origin request shari
• CVE-2026-50087 2026-06-12 · CVSS 8.2
  The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domai
• CVE-2026-50086 2026-06-12 · CVSS 10.0
  The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an ins
• CVE-2026-50085 2026-06-12 · CVSS 8.6
  The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. Th
• CVE-2026-50084 2026-06-12 · CVSS 9.6
  The Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api) would authorize any valid developer token for access to any account. This is an instance of "CW
• CVE-2026-50083 2026-06-12 · CVSS 9.1
  The Aqara IAM/SSO Gateway (gw-builder.aqara.com) used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." Thi
• CVE-2026-50082 2026-06-12 · CVSS 6.5
  The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address supplied by the attacker. This is an instance of "CWE-306:
• CVE-2026-33362 2026-05-11 · CVSS 8.6
  In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple sec