CVE Vulnerabilities - 28 September 2026

Netcore NR289‑GE allows remote access without login

CVE-2026-101077

The Netcore NR289‑GE version 1.4.5102 lets anyone on the network send a request to the boa_temp component and skip the normal login check. This could let attackers view or change information the syste...

9.3

Netcore NR289‑GE allows remote command execution via NTP setting

CVE-2026-101076

The Netcore NR289‑GE device (firmware version 1.4.5102) lets an attacker send specially crafted data to the NTP configuration page, causing the system to run arbitrary commands. This can be done from ...

9.3

Netcore NR289-GE allows remote command injection

CVE-2026-101075

The NR289-GE video intercom running version 1.4.5102 can be tricked into executing operating system commands when an attacker supplies a crafted MAC address to its location_time.cgi feature. This mean...

9.3

Netcore NR289-GE allows remote command execution via ap_ip.cgi

CVE-2026-101072

The Netcore NR289-GE device (version 1.4.5102) runs a web script called ap_ip.cgi that accepts an IP address parameter. By sending a specially crafted value, an attacker can cause the device to run an...

9.3

FAST FAC1900R devdiscover Service can be remotely exploited

CVE-2026-101039

The devdiscover Service in FAST FAC1900R version 20190827_2.0.2 contains a flaw that lets an attacker send specially crafted data and overflow a memory area, potentially crashing the device or taking ...

9.3

Netcore NBR200V2 web interface allows remote command execution

CVE-2026-101001

The web management page on Netcore NBR200V2 can be tricked into running system commands by sending a crafted request. An attacker on the network could use this to take control of the device. Apply the...

9.3

Netcore NBR100V2 allows remote actions without permission

CVE-2026-101000

The Netcore NBR100V2 device can be triggered over the network to perform actions without checking whether the user is authorized. This occurs because a specific settings file does not correctly verify...

9.3

LXD can let an attacker write any file as root

CVE-2026-87799 DEBIAN-CVE-2026-87799 UBUNTU-CVE-2026-87799 GHSA-fmc3-3cpq-6whr

Versions of Canonical LXD for Linux can be tricked into placing a symbolic link during a migration, letting an authorized user or a malicious source server write files anywhere on the host. Because th...

9.9

LXD backup import lets privileged user alter host files

CVE-2026-85526 DEBIAN-CVE-2026-85526 UBUNTU-CVE-2026-85526 GHSA-h85r-gjgx-g2rv

When LXD (or its Debian variants) imports a Btrfs backup, a user who can create containers can craft a special file path that lets them delete or replace any file on the server as the root user. This ...

9.9

FAST FAC1200R remote code execution risk

CVE-2026-101038

The FAST FAC1200R device running version 5.0_20201119_1.0.2 has a flaw in its MmtAtePrase parser that can overflow memory and let an attacker take control from afar. The problem is already known publi...

8.6

FAST FAC1200R remote code execution via devdiscover service

CVE-2026-101037

The devdiscover service in FAST FAC1200R can be tricked into overwriting memory, allowing an attacker on the network to take control of the device. This problem can be exploited from afar and a workin...

8.6

Apache Roller XML-RPC can let users edit other blogs

CVE-2026-82377

Apache Roller version 6.1.5 lets anyone who can log in use the old XML‑RPC interface to view, change or delete posts that belong to other blogs, because it does not check whether the user has rights t...

9.9

Netcore NBR200V2 allows remote command execution via ping tool

CVE-2026-101002

The ping utility in Netcore NBR200V2 version 1.3.241127.071246 can be tricked into running any command an attacker supplies. Because it can be triggered over the network, an attacker could take contro...

8.6

TOTOLINK N150RT allows remote command execution

CVE-2026-100896

The web admin page on TOTOLINK N150RT routers can be tricked into running system commands. An attacker who accesses the router’s management interface could execute unwanted actions on the device. Upda...

8.6

Authlib library can accept unsigned data as verified

CVE-2026-96760 UBUNTU-CVE-2026-96760 DEBIAN-CVE-2026-96760

The Authlib software (versions up to 1.7.2) may treat data as securely signed even when no signature is present. This lets an attacker create fake authentication tokens that the system will trust. Upd...

9.8

Joomla Book Library extension lets attackers change data order

CVE-2026-101110

The free Book Library add‑on for Joomla can be tricked into running a database command that changes how book listings are sorted. An attacker can send specially crafted requests without logging in to ...

9.3

CGA-m4qm-vrm4-7qq4

CGA-m4qm-vrm4-7qq4

9.8

CGA-wmgq-wv2r-mcjv

CGA-wmgq-wv2r-mcjv

9.8

Netcore NR289-GE remote code risk via login

CVE-2026-101074

The login program in Netcore NR289-GE version 1.4.5102 can be tricked into overflowing its memory when a crafted username is supplied. This could let an attacker run their own code from afar. Apply th...

8.9

Logsign SIEM can be accessed with default admin credentials

CVE-2026-90924

The Logsign SIEM version 6.4.101 through 6.4.116 accepts the factory‑set username and password, so anyone who knows these defaults can log in. This could let an attacker view or change security logs a...

9.8

CGA-fqw5-rw4p-m2r8

CGA-fqw5-rw4p-m2r8

9.8

libdbi-perl can let attackers gain higher privileges

CVE-2026-73193 GHSA-wj3v-c3hh-mhqr ROOT-OS-DEBIAN-12-CVE-2026-73193 DEBIAN-CVE-2026-73193

The libdbi-perl software used on Debian systems could be manipulated so an attacker can increase their access rights. This could let them control more of the system or data. Update the libdbi-perl pac...

9.8

Red Hat IPA may let attackers gain unauthorized access

RHSA-2026:72279

The IPA server and its client components for Red Hat can be tricked into granting access to users who should not have it. This could let an attacker view or change sensitive configuration data. Apply ...

9.8

Unbound on Red Hat could allow unauthorized data access

RHSA-2026:72264

The Unbound DNS resolver and its Python bindings provided by Red Hat may let attackers retrieve or modify DNS information they shouldn't see. This could expose internal network details or redirect use...

9.8

Apache Roller can run attacker code via XML-RPC

CVE-2026-82384

Apache Roller version 6.1.5 lets anyone send specially crafted XML-RPC messages that are processed before anyone logs in. This can let an attacker make the server execute their own code, potentially t...

9.8