Search vulnerabilities

Expected end of text, found ':' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,103

CVE-2026-36176

Plaintext Exposure of Backblaze B2 Upload Tokens via Serial Console

GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active tokens to perform unauthorized operations via monitoring the serial UART interface.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Gncc
Products
Gp5
CVE-2026-36178

Residual Cryptographic Material After Factory Reset in GNCC GP5

The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, possibly allowing attackers to recover and obtain sensitive user data.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Gncc
Products
Gp5
CVE-2026-7764

Out-of-bounds read in morse.ko Vendor IE processing

An out-of-bounds read vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.12 allows an unauthenticated attacker within radio range to disclose a small amount of kernel heap memory or cause a Denial of Service (kernel oops/panic) via a crafted 802.11ah beacon or probe response frame containing a malformed Vendor Information Element. The function morse_vendor_find_vendor_ie() does not validate the IE length against the expected structure size before its result is passed to morse_vendor_rx_caps_ops_ie() and morse_vendor_fill_sta_vendor_info(), which read at fixed offsets into the IE data. Because the length check only requires the IE to be longer than 3 bytes, an attacker can supply an undersized IE, causing a heap out-of-bounds read of up to 9 bytes. No authentication, association, or user interaction is required.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Morse Micro Morsemicro
Products
Halowlink 2 Halow Link 2 Halowlink 2 and 1 more
CVE-2026-41858

Weak Randomness Allows Brute‑Force Recovery of Windows Administrator Password

Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network attacker to estimate VM boot time and reconstruct a small candidate list to recover the Administrator password. The randomize_password job exists solely to lock the local Administrator account behind an unguessable password as a hardening control. Because the password is derived from a predictable, clock-seeded PRNG, a network attacker who can estimate VM boot time can reconstruct a small candidate list and recover the Administrator password, defeating the hardening control. Affected versions: - windows-utilities-release: all versions prior to v0.23.0 (inclusive); fixed in v0.23.0 or later

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cloud Foundry Foundation
Products
Windows-utilities-release