tag
Cwe-284
Critical
Twonky Server 8.5.2 Unauthenticated `/nmc/rpc/` Auth Bypass & Admin Credential Log Leak (CVE-2025-13315)
CVE-2025-13315·
Twonky Server (Lynx Technology), a DLNA/UPnP media server
unpatched
Critical
Frontend Admin by DynamiApps — Unauthenticated Administrator Account Creation (CVE-2025-13342)
CVE-2025-13342·
Frontend Admin by DynamiApps (WordPress plugin built on Advanced Custom Fields / ACF frontend forms)
patched
Critical
FiberHome HG6145F1 Predictable Default Wi-Fi PSK Derived from Broadcast SSID (CVE-2025-63353)
CVE-2025-63353 / GHSA-cg2x-c25f-6327·
FiberHome HG6145F1 GPON ONT (Wuhan FiberHome International Technologies)
patched
Medium
Veno File Manager Incorrect Access Control — Application Log Extraction (CVE-2026-37067)
CVE-2026-37067·
Veno File Manager Project
unpatched
Not disclosed
Linux Kernel PPP Unprivileged User-Namespace Precondition Probe — CVE-2026-53075
CVE-2026-53075·
Linux kernel, PPP (/dev/ppp) subsystem
unpatched