https://vulnogram.org/ Most recent CVEs assigned by runZero, Inc. (runzero). https://vulnogram.org/seaview/icons/runzero.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-65200 https://vulnogram.org/CVE-2026-65200 The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supplied response… Low Tue, 13 Oct 2026 14:19:51 GMT https://vulnogram.org/CVE-2026-65199 https://vulnogram.org/CVE-2026-65199 openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_u… Medium Tue, 13 Oct 2026 14:19:24 GMT https://vulnogram.org/CVE-2026-65198 https://vulnogram.org/CVE-2026-65198 Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit tha… High Network Exploitable Tue, 13 Oct 2026 14:18:34 GMT https://vulnogram.org/CVE-2026-65197 https://vulnogram.org/CVE-2026-65197 H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`. That file is writable by an authenticated Redfish client through the `UpdateService.UploadSignKey` action, which s… Low Tue, 13 Oct 2026 14:17:54 GMT https://vulnogram.org/CVE-2026-16141 https://vulnogram.org/CVE-2026-16141 OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then ac… High Network Exploitable Tue, 15 Sep 2026 13:57:28 GMT https://vulnogram.org/CVE-2026-16140 https://vulnogram.org/CVE-2026-16140 OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a target account while still maintaining the original integrity and encryption keys. Several… High Tue, 15 Sep 2026 13:57:19 GMT https://vulnogram.org/CVE-2026-81846 https://vulnogram.org/CVE-2026-81846 An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0. This issue is an instance of CWE-639: Authorization Bypass Through User-Controlled Key and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:L/U… Low Tue, 01 Sep 2026 19:04:31 GMT https://vulnogram.org/CVE-2026-6688 https://vulnogram.org/CVE-2026-6688 FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling. With LFN enabled, fno.fname can be up to 255 characters; many callers copy it into short fixed buffers without bounds checks, cau… High Wed, 01 Jul 2026 14:01:04 GMT https://vulnogram.org/CVE-2026-6687 https://vulnogram.org/CVE-2026-6687 FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted without enforcing spec maximums. This maps to CWE-121 (Stack-based Buffer Overflow). Estimated CVSS v3.1 vector: CVSS:3.1/AV:P… High Wed, 01 Jul 2026 13:57:54 GMT https://vulnogram.org/CVE-2026-6686 https://vulnogram.org/CVE-2026-6686 FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF without zero-filling newly allocated clusters. This maps to CWE-908 (Use of Uninitialized Resource). Estimated CVSS v3.1 vector: CVSS:3.1/AV:P/… Medium Wed, 01 Jul 2026 13:55:09 GMT https://vulnogram.org/CVE-2026-6684 https://vulnogram.org/CVE-2026-6684 FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived from GPT header field GPTH_PtNum, enabling extremely long or effectively infinite mount-time scans. This maps to CWE-835 (Loop with… Medium Wed, 01 Jul 2026 13:45:03 GMT https://vulnogram.org/CVE-2026-6683 https://vulnogram.org/CVE-2026-6683 FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to be zero during write/sync operations. This maps to CWE-369 (Divide By Zero). Estimated CVSS v3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI… Medium Wed, 01 Jul 2026 13:41:11 GMT https://vulnogram.org/CVE-2026-6682 https://vulnogram.org/CVE-2026-6682 In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to attacker-controlled file-size metadata and unsafe read lengths in downstream callers. This maps to CWE-190 (Integer Ove… High Wed, 01 Jul 2026 13:36:59 GMT https://vulnogram.org/CVE-2026-10303 https://vulnogram.org/CVE-2026-10303 In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in challenge-file handling, allowing a maliciously crafted token to influence local path/filename… High Network Exploitable Tue, 16 Jun 2026 18:24:43 GMT https://vulnogram.org/CVE-2026-50091 https://vulnogram.org/CVE-2026-50091 Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimated CVSS of… Critical Network Exploitable Fri, 12 Jun 2026 15:02:24 GMT https://vulnogram.org/CVE-2026-50090 https://vulnogram.org/CVE-2026-50090 The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of "CWE-1289: Improper Validation of Unsafe Equivalence in Input" and has… Critical Network Exploitable Fri, 12 Jun 2026 15:02:13 GMT https://vulnogram.org/CVE-2026-50089 https://vulnogram.org/CVE-2026-50089 The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (6.1 Medium), which can be used t… Medium Network Exploitable Fri, 12 Jun 2026 15:02:02 GMT https://vulnogram.org/CVE-2026-50088 https://vulnogram.org/CVE-2026-50088 The Aqara Developer Portal (developer.aqara.com) and shared test environments (developer-test.aqara.com, aiot-test.aqara.com) exhibit cross-origin request sharing, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrusted Domain… High Network Exploitable Fri, 12 Jun 2026 15:01:49 GMT https://vulnogram.org/CVE-2026-50087 https://vulnogram.org/CVE-2026-50087 The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrusted Domains," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:… High Network Exploitable Fri, 12 Jun 2026 15:01:37 GMT https://vulnogram.org/CVE-2026-50086 https://vulnogram.org/CVE-2026-50086 The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and "CWE-327: Use of a Br… Critical Network Exploitable Fri, 12 Jun 2026 15:01:26 GMT https://vulnogram.org/CVE-2026-50085 https://vulnogram.org/CVE-2026-50085 The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and has an es… High Network Exploitable Fri, 12 Jun 2026 15:01:13 GMT https://vulnogram.org/CVE-2026-50084 https://vulnogram.org/CVE-2026-50084 The Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api) would authorize any valid developer token for access to any account. This is an instance of "CWE-862: Missing Authorization" with an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C… Critical Fri, 12 Jun 2026 15:01:00 GMT https://vulnogram.org/CVE-2026-50083 https://vulnogram.org/CVE-2026-50083 The Aqara IAM/SSO Gateway (gw-builder.aqara.com) used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (9.1 Critica… Critical Network Exploitable Fri, 12 Jun 2026 15:00:49 GMT https://vulnogram.org/CVE-2026-50082 https://vulnogram.org/CVE-2026-50082 The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address supplied by the attacker. This is an instance of "CWE-306: Missing Authentication for Critical Function" with an estimated CVSS of CVSS:3.1/AV:N/AC:L… Medium Network Exploitable Fri, 12 Jun 2026 15:00:31 GMT https://vulnogram.org/CVE-2026-33362 https://vulnogram.org/CVE-2026-33362 In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secrets are hardcoded and shared, including API signing material, password-… High Network Exploitable Mon, 11 May 2026 16:04:16 GMT https://vulnogram.org/CVE-2026-33361 https://vulnogram.org/CVE-2026-33361 In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3" files use reversible XOR over only the first 1024 bytes with a predi… High Network Exploitable Mon, 11 May 2026 16:03:55 GMT https://vulnogram.org/CVE-2026-33359 https://vulnogram.org/CVE-2026-33359 In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and… High Network Exploitable Cloud Hosted Mon, 11 May 2026 16:03:21 GMT https://vulnogram.org/CVE-2026-33357 https://vulnogram.org/CVE-2026-33357 In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for… High Network Exploitable Mon, 11 May 2026 16:02:40 GMT https://vulnogram.org/CVE-2026-33356 https://vulnogram.org/CVE-2026-33356 In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from devices the user does not own. The broker enforces publish restrictions but does n… High Mon, 11 May 2026 16:02:14 GMT https://vulnogram.org/CVE-2026-7778 https://vulnogram.org/CVE-2026-7778 An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L… Medium Tue, 05 May 2026 13:44:38 GMT https://vulnogram.org/CVE-2026-5384 https://vulnogram.org/CVE-2026-5384 An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC… Medium Tue, 07 Apr 2026 14:12:42 GMT https://vulnogram.org/CVE-2026-5383 https://vulnogram.org/CVE-2026-5383 An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/… Medium Tue, 07 Apr 2026 14:12:32 GMT https://vulnogram.org/CVE-2026-5382 https://vulnogram.org/CVE-2026-5382 An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/… Low Tue, 07 Apr 2026 14:12:23 GMT https://vulnogram.org/CVE-2026-5381 https://vulnogram.org/CVE-2026-5381 An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N (2.2… Low Tue, 07 Apr 2026 14:12:15 GMT https://vulnogram.org/CVE-2026-5380 https://vulnogram.org/CVE-2026-5380 An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of CVSS:3… Medium Network Exploitable Tue, 07 Apr 2026 14:12:05 GMT https://vulnogram.org/CVE-2026-5379 https://vulnogram.org/CVE-2026-5379 An issue that allowed MCP agents to access certificate information from outside of their authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/P… Low Tue, 07 Apr 2026 14:11:53 GMT https://vulnogram.org/CVE-2026-5378 https://vulnogram.org/CVE-2026-5378 An issue that allowed administrators to create and update users outside of their authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N… Medium Tue, 07 Apr 2026 14:11:42 GMT https://vulnogram.org/CVE-2026-5376 https://vulnogram.org/CVE-2026-5376 An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score… Medium Tue, 07 Apr 2026 14:11:30 GMT https://vulnogram.org/CVE-2026-5375 https://vulnogram.org/CVE-2026-5375 An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved. This is an instance of CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, and has an estimated CVSS sco… Low Tue, 07 Apr 2026 14:11:14 GMT https://vulnogram.org/CVE-2026-5374 https://vulnogram.org/CVE-2026-5374 An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:… Medium Tue, 07 Apr 2026 14:10:36 GMT https://vulnogram.org/CVE-2026-5373 https://vulnogram.org/CVE-2026-5373 An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:… High Tue, 07 Apr 2026 14:10:18 GMT https://vulnogram.org/CVE-2026-5372 https://vulnogram.org/CVE-2026-5372 An issue that allowed a SQL injection attack vector related to saved queries (introduced in version 4.0.260123.0). This is an instance of CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), and has an estimat… Medium Tue, 07 Apr 2026 14:10:08 GMT