CVE ID :CVE-2026-86133 Published : Sept. 30, 2026, 12:16 a.m. | 15 minutes ago Description :An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has…
CVE-2026-86132 – Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service
CVE ID :CVE-2026-86132 Published : Sept. 30, 2026, 12:16 a.m. | 15 minutes ago Description :An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to…
CVE-2026-86131 – Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution
CVE ID :CVE-2026-86131 Published : Sept. 30, 2026, 12:16 a.m. | 15 minutes ago Description :A code injection vulnerability in WatchGuard Fireware OS’s BOVPN Over TLS client configuration handling allows an attacker who…
CVE-2026-86128 – Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service
CVE ID :CVE-2026-86128 Published : Sept. 30, 2026, 12:16 a.m. | 15 minutes ago Description :A NULL pointer dereference vulnerability in Fireware OS’s NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause…
CVE-2026-86104 – Fireware OS Resource Exhaustion in Login Process Allows Denial of Service
CVE ID :CVE-2026-86104 Published : Sept. 30, 2026, 12:16 a.m. | 15 minutes ago Description :An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to…
CVE-2026-102361 – mall4j through 4.0 Missing Authentication in Password Update Endpoint
CVE ID :CVE-2026-102361 Published : Sept. 29, 2026, 12:17 a.m. | 13 minutes ago Description :mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers to…
CVE-2026-101264 – Ziroom ZHOME A0101 set_passwd command injection
CVE ID :CVE-2026-101264 Published : Sept. 29, 2026, 12:17 a.m. | 13 minutes ago Description :A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork/set_passwd….
CVE-2026-101263 – Ziroom ZHOME A0101 set_online_client command injection
CVE ID :CVE-2026-101263 Published : Sept. 29, 2026, 12:17 a.m. | 13 minutes ago Description :A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file…
CVE-2026-102334 – Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection
CVE ID :CVE-2026-102334 Published : Sept. 28, 2026, 11:17 p.m. | 1 hour, 13 minutes ago Description :Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password…
CVE-2026-101262 – Ziroom ZHOME A0101 set_online_client command injection
CVE ID :CVE-2026-101262 Published : Sept. 28, 2026, 11:17 p.m. | 1 hour, 13 minutes ago Description :A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the…