Export limit exceeded: 10090 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-56015

Unauthenticated Access to GenieACS NBI API Endpoint

In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Genieacs
Products
Genieacs
CVE-2021-46704

In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts). The vulnerability arises from insufficient input validation combined with a missing authorization check.

CVSS 3.1 · 9.8 Critical EPSS 21.9% KEV · Not listed
Vendors
Genieacs
Products
Genieacs