CWE-912

CWE-912 · 7 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-912, highest CVSS first.

  1. CRITICAL 9.8CVE-2026-118579public PoC2026-10-28

    A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is poss…

    AI risk analysis on Exploit-DB.ai →

  2. CRITICAL 9.8CVE-2026-828292026-10-01

    Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suit…

    AI risk analysis on Exploit-DB.ai →

  3. CRITICAL 9.8CVE-2026-615152026-08-04

    Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on …

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 8CVE-2026-1123602026-10-19

    A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be init…

    AI risk analysis on Exploit-DB.ai →

  5. HIGH 7.2CVE-2026-976272026-10-20

    Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may execute arbitrary OS commands.

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 4.9CVE-2026-1007372026-10-20

    Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware.

    AI risk analysis on Exploit-DB.ai →

  7. UNSCOREDCVE-2026-1143532026-10-23

    Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically-present attacker with USB access to execute arbitrary OS commands as root by sendi…

    AI risk analysis on Exploit-DB.ai →