tag
Credential-Leak
Critical
Twonky Server 8.5.2 Unauthenticated `/nmc/rpc/` Auth Bypass & Admin Credential Log Leak (CVE-2025-13315)
CVE-2025-13315·
Twonky Server (Lynx Technology), a DLNA/UPnP media server
unpatched
Critical
Pterodactyl Panel Unauthenticated Path Traversal via locale.json Leaking Database Credentials (CVE-2025-49132)
CVE-2025-49132·
Pterodactyl Panel (game server management panel)
unpatched
High
ZTE ZXHN H298A / H108N Router Unauthenticated Credential Disclosure (CVE-2026-34474)
CVE-2026-34474·
ZTE ZXHN H298A (hardware 1.1) and ZXHN H108N (hardware 2.6) home routers
unpatched
Critical
ZTE ZXHN H188A Unauthenticated Wizard Handler Credential Disclosure / Auth Bypass (CVE-2026-34472)
CVE-2026-34472·
ZTE ZXHN H188A V6 home router firmware
unpatched