CVE ID :CVE-2026-43835 Published : Oct. 20, 2026, 8:16 a.m. | 1 hour, 49 minutes ago Description :A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently. Severity:...

#Sicherheitslücke #IoT

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-43835 - Firmware Integrity Bypass in Device Firmware Upgrade Functionality

VERWANDTEARTIKEL

CVE-2026-105949 - Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints

CVE-2026-105312 - Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation

CVE-2026-9589 - Unblu Spark Authorization Bypass in Configuration Cascade Operations

CVE-2026-113358 - LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes

CVE-2026-113351 - libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset

CVE-2026-96656