CVE-2026-42947 - Naxclow IoT Platform Authorization bypass through User-Controlled key
CVE ID :CVE-2026-42947 Published : June 12, 2026, 6:13 p.m. | 54 minutes ago Description :A flaw in Naxclow's platform’s onboarding workflow allows an attacker to replay a confirm-then-bind sequence to silently reassign a device to an arbitrary account. Because the affected endpoints validate...