Veille CVE

Mardi 23 juin 2026

4 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2025-67038 9.8 Critique Exploitée

    Lantronix EDS5000 series · Lantronix G520 series · Lantronix X300 series · Lantronix E210 series

    An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.

  2. CVE-2026-34910 – Non évaluée Exploitée

    Ubiquiti UniFi OS

    Ubiquiti UniFi OS Improper Input Validation Vulnerability — Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection.

  3. CVE-2026-34909 – Non évaluée Exploitée

    Ubiquiti UniFi OS

    Ubiquiti UniFi OS Path Traversal Vulnerability — Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underlying system that could be manipulated to access an underlying account.

  4. CVE-2026-34908 – Non évaluée Exploitée

    Ubiquiti UniFi OS

    Ubiquiti UniFi OS Improper Access Control Vulnerability — Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system.