https://vulnogram.org/ Most recent CVEs assigned by Indian Computer Emergency Response Team (CERT-In) (cert-in). https://vulnogram.org/seaview/icons/cert-in.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-107104 https://vulnogram.org/CVE-2026-107104 This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable… Critical Network Exploitable Wed, 07 Oct 2026 08:25:14 GMT https://vulnogram.org/CVE-2026-107103 https://vulnogram.org/CVE-2026-107103 This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the… Critical Network Exploitable Wed, 07 Oct 2026 08:21:22 GMT https://vulnogram.org/CVE-2026-107102 https://vulnogram.org/CVE-2026-107102 This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the para… Critical Network Exploitable Wed, 07 Oct 2026 08:16:11 GMT https://vulnogram.org/CVE-2026-85153 https://vulnogram.org/CVE-2026-85153 This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application pac… Critical Network Exploitable Tue, 06 Oct 2026 07:11:39 GMT https://vulnogram.org/CVE-2026-96515 https://vulnogram.org/CVE-2026-96515 This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and exe… High Disputed Thu, 24 Sep 2026 11:59:40 GMT https://vulnogram.org/CVE-2026-84149 https://vulnogram.org/CVE-2026-84149 This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrie… Critical Network Exploitable Tue, 01 Sep 2026 12:44:17 GMT https://vulnogram.org/CVE-2026-84148 https://vulnogram.org/CVE-2026-84148 This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of s… Critical Network Exploitable Tue, 01 Sep 2026 12:38:26 GMT https://vulnogram.org/CVE-2026-84147 https://vulnogram.org/CVE-2026-84147 This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web acc… Critical Network Exploitable Tue, 01 Sep 2026 12:32:59 GMT https://vulnogram.org/CVE-2026-19412 https://vulnogram.org/CVE-2026-19412 This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the l… High Fri, 28 Aug 2026 13:39:47 GMT https://vulnogram.org/CVE-2026-65894 https://vulnogram.org/CVE-2026-65894 This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful expl… High Network Exploitable Mon, 27 Jul 2026 07:16:33 GMT https://vulnogram.org/CVE-2026-65893 https://vulnogram.org/CVE-2026-65893 This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execut… High Mon, 27 Jul 2026 07:12:43 GMT https://vulnogram.org/CVE-2026-9506 https://vulnogram.org/CVE-2026-9506 This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences through the… High Network Exploitable Mon, 08 Jun 2026 09:28:51 GMT https://vulnogram.org/CVE-2026-45433 https://vulnogram.org/CVE-2026-45433 This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the cryptographic private key from the firmware, which… High Network Exploitable Thu, 04 Jun 2026 12:13:41 GMT https://vulnogram.org/CVE-2026-45432 https://vulnogram.org/CVE-2026-45432 This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitiv… High Network Exploitable Thu, 04 Jun 2026 12:07:31 GMT https://vulnogram.org/CVE-2026-45431 https://vulnogram.org/CVE-2026-45431 This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrar… High Thu, 04 Jun 2026 12:04:09 GMT https://vulnogram.org/CVE-2026-9274 https://vulnogram.org/CVE-2026-9274 This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing the UART interface and performing memory extractio… Medium Mon, 25 May 2026 09:19:04 GMT https://vulnogram.org/CVE-2026-42518 https://vulnogram.org/CVE-2026-42518 This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript. An unauthenticated remote attacker could exploit this vulnerability by accessing the client-side code to ex… High Network Exploitable Wed, 29 Apr 2026 08:37:32 GMT https://vulnogram.org/CVE-2026-42517 https://vulnogram.org/CVE-2026-42517 This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this vulnerability by decoding and manipulating Base64-encoded parameters in the request URL to… High Wed, 29 Apr 2026 08:30:09 GMT https://vulnogram.org/CVE-2026-42516 https://vulnogram.org/CVE-2026-42516 This vulnerability exists in e-Sushrut due to improper authorization checks during resource access. An authenticated attacker could exploit this vulnerability by manipulating encoded parameters in the request URL to gain unauthorized access to patien… High Wed, 29 Apr 2026 08:26:15 GMT https://vulnogram.org/CVE-2026-42515 https://vulnogram.org/CVE-2026-42515 This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating parameter in the API request URL to gain unauthorized access to sensitive… High Wed, 29 Apr 2026 08:22:57 GMT https://vulnogram.org/CVE-2026-42514 https://vulnogram.org/CVE-2026-42514 This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses. A remote attacker could exploit this vulnerability by intercepting API responses containing valid OTPs. Successful exploitation of this vulnerability co… High Network Exploitable Wed, 29 Apr 2026 08:17:12 GMT https://vulnogram.org/CVE-2026-42513 https://vulnogram.org/CVE-2026-42513 This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status. A remote attacker could exploit this vulnerability by intercepting and modifying the server… High Network Exploitable Wed, 29 Apr 2026 08:13:23 GMT https://vulnogram.org/CVE-2026-41039 https://vulnogram.org/CVE-2026-41039 This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoi… High Network Exploitable Tue, 21 Apr 2026 10:28:24 GMT https://vulnogram.org/CVE-2026-41038 https://vulnogram.org/CVE-2026-41038 This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing password guessing or bru… High Tue, 21 Apr 2026 10:22:09 GMT https://vulnogram.org/CVE-2026-41036 https://vulnogram.org/CVE-2026-41036 This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary OS commands on the ta… High Tue, 21 Apr 2026 10:07:47 GMT https://vulnogram.org/CVE-2026-41037 https://vulnogram.org/CVE-2026-41037 This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing b… High Tue, 21 Apr 2026 10:04:56 GMT https://vulnogram.org/CVE-2026-5777 https://vulnogram.org/CVE-2026-5777 This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this v… High Fri, 10 Apr 2026 11:40:55 GMT https://vulnogram.org/CVE-2026-22082 https://vulnogram.org/CVE-2026-22082 This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the use of login credentials as the session ID through its web-based administrative interface. A remote attacker could exploit this vul… High Network Exploitable Fri, 09 Jan 2026 11:24:54 GMT https://vulnogram.org/CVE-2026-22081 https://vulnogram.org/CVE-2026-22081 This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the missing HTTPOnly flag for session cookies associated with the web-based administrative interface. A remote at-tacker could exploit… High Network Exploitable Fri, 09 Jan 2026 11:16:21 GMT https://vulnogram.org/CVE-2026-22080 https://vulnogram.org/CVE-2026-22080 This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the transmission of credentials encoded using reversible Base64 encoding through the web-based administrative interface. An attacker on… High Fri, 09 Jan 2026 11:05:07 GMT https://vulnogram.org/CVE-2026-22079 https://vulnogram.org/CVE-2026-22079 This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrati… High Fri, 09 Jan 2026 11:02:50 GMT https://vulnogram.org/CVE-2025-10957 https://vulnogram.org/CVE-2025-10957 This vulnerability exists in the Syrotech SY-GPON-2010-WADONT router due to improper access control in its FTP service. A remote attacker could exploit this vulnerability by establishing an FTP connection using default credentials, potentially gainin… High Thu, 25 Sep 2025 11:43:15 GMT https://vulnogram.org/CVE-2025-10546 https://vulnogram.org/CVE-2025-10546 This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface (CGI) parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into t… Medium Network Exploitable Tue, 16 Sep 2025 12:18:58 GMT https://vulnogram.org/CVE-2025-55280 https://vulnogram.org/CVE-2025-55280 This vulnerability exists in ZKTeco WL20 due to storage of Wi-Fi credentials, configuration data and system data in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and… Medium Wed, 13 Aug 2025 11:38:35 GMT https://vulnogram.org/CVE-2025-55279 https://vulnogram.org/CVE-2025-55279 This vulnerability exists in ZKTeco WL20 due to hard-coded private key stored in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to retri… Medium Wed, 13 Aug 2025 11:23:53 GMT https://vulnogram.org/CVE-2025-54465 https://vulnogram.org/CVE-2025-54465 This vulnerability exists in ZKTeco WL20 due to hard-coded MQTT credentials and endpoints stored in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the b… Medium Wed, 13 Aug 2025 11:17:41 GMT https://vulnogram.org/CVE-2025-54464 https://vulnogram.org/CVE-2025-54464 This vulnerability exists in ZKTeco WL20 due to storage of admin and user credentials without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the bin… High Wed, 13 Aug 2025 11:12:16 GMT https://vulnogram.org/CVE-2025-53758 https://vulnogram.org/CVE-2025-53758 This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the bin… Medium Wed, 16 Jul 2025 11:29:12 GMT https://vulnogram.org/CVE-2025-53757 https://vulnogram.org/CVE-2025-53757 This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session… High Network Exploitable Wed, 16 Jul 2025 11:25:05 GMT https://vulnogram.org/CVE-2025-53756 https://vulnogram.org/CVE-2025-53756 This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext crede… High Network Exploitable Wed, 16 Jul 2025 11:21:32 GMT https://vulnogram.org/CVE-2025-53755 https://vulnogram.org/CVE-2025-53755 This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse enginee… Medium Wed, 16 Jul 2025 11:18:02 GMT https://vulnogram.org/CVE-2025-53754 https://vulnogram.org/CVE-2025-53754 This vulnerability exists in Digisol DG-GR6821AC Router due to hard-coded Root Access Credentials in system configuration of the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzi… Medium Wed, 16 Jul 2025 11:13:48 GMT https://vulnogram.org/CVE-2025-42605 https://vulnogram.org/CVE-2025-42605 This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modification, or cancellation operations. An authenticated remote attacker could exploit this vulnerability by man… Critical Network Exploitable Wed, 23 Apr 2025 10:51:00 GMT https://vulnogram.org/CVE-2025-42604 https://vulnogram.org/CVE-2025-42604 This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response l… Medium Network Exploitable Wed, 23 Apr 2025 10:43:56 GMT https://vulnogram.org/CVE-2025-42603 https://vulnogram.org/CVE-2025-42603 This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting API respo… High Network Exploitable Wed, 23 Apr 2025 10:38:49 GMT https://vulnogram.org/CVE-2025-42602 https://vulnogram.org/CVE-2025-42602 This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process. A remote attacker could exploit this vulnerability by intercepting and manipulating the response… High Network Exploitable Wed, 23 Apr 2025 10:36:07 GMT https://vulnogram.org/CVE-2025-42601 https://vulnogram.org/CVE-2025-42601 This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints. A remote attacker could exploit this vulnerability by intercepting the request and removing the Captcha parameter lead… High Network Exploitable Wed, 23 Apr 2025 10:32:30 GMT https://vulnogram.org/CVE-2025-42600 https://vulnogram.org/CVE-2025-42600 This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password (OTP) attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a… High Network Exploitable Wed, 23 Apr 2025 10:25:16 GMT https://vulnogram.org/CVE-2025-3442 https://vulnogram.org/CVE-2025-3442 This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data… Medium Wed, 09 Apr 2025 07:02:54 GMT https://vulnogram.org/CVE-2025-29998 https://vulnogram.org/CVE-2025-29998 This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API end… High Network Exploitable Thu, 13 Mar 2025 11:23:57 GMT