Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
3.5 LOW
CVE-2026-9395 — Besen BS20 EV Charging Station BLE/UDP insufficiently protected credentials

A vulnerability was identified in Besen BS20 EV Charging Station up to 20260426. Affected is an unknown function of the component BLE/UDP. The manipulation leads to insufficiently protected credentia…

bs20_ev_charging_station | Authentication
May 24, 2026 May 26, 2026
May 24, 2026
May 26, 2026
3.1 LOW
CVE-2026-9394 — Besen BS20 EV Charging Station Bluetooth Low Energy weak password

A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. This impacts an unknown function of the component Bluetooth Low Energy Handler. Executing a manipulation can lead to w…

bs20_ev_charging_station | Authentication
May 24, 2026 May 26, 2026
May 24, 2026
May 26, 2026
9.0 HIGH
CVE-2026-9393 — H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow

A vulnerability was found in H3C Magic B0 up to 100R002. This affects the function Edit_BasicSSID_5G of the file /goform/aspForm. Performing a manipulation of the argument param results in buffer ove…

magic_b0_firmware | Remote | Memory Corruption
May 24, 2026 May 26, 2026
May 24, 2026
May 26, 2026
9.0 HIGH
CVE-2026-9389 — Tenda F456 L7Im frmL7ImForm buffer overflow

A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page leads to buffer overflow. The a…

f456_firmware | Remote | Memory Corruption
May 24, 2026 May 26, 2026
May 24, 2026
May 26, 2026
10.0 HIGH
CVE-2026-9388 — Totolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injection

A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface.…

a8000ru_firmware | Remote | Injection
May 24, 2026 May 26, 2026
May 24, 2026
May 26, 2026
10.0 HIGH
CVE-2026-9387 — Totolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injection

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component Web Management Interfa…

a8000ru_firmware | Remote | Injection
May 24, 2026 May 26, 2026
May 24, 2026
May 26, 2026
10.0 HIGH
CVE-2026-9386 — Totolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injection

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipu…

a8000ru_firmware | Remote | Injection
May 24, 2026 May 26, 2026
May 24, 2026
May 26, 2026
Showing 20 of 7547 Results