CWE-284 (2634) CWE-79 (1848) CWE-416 (1298) CWE-862 (1184) CWE-89 (1097) CWE-22 (1024) CWE-125 (884) CWE-200 (847) CWE-306 (838) CWE-122 (831) CWE-20 (798) CWE-78 (711) CWE-918 (690) CWE-787 (686) CWE-863 (643) CWE-94 (642) CWE-74 (600) CWE-639 (543) CWE-400 (530) CWE-119 (503) CWE-269 (501) CWE-502 (471) CWE-770 (441) CWE-287 (432) CWE-121 (408) CWE-77 (373) CWE-190 (370) CWE-362 (323) CWE-352 (281) CWE-285 (243)

CWE-912

9 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-7413 critical 9.8 0.0058 2026-05-07 A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticat
CVE-2026-17032 critical 9.8 0.0054 2026-08-06 Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised
CVE-2026-18191 critical 9.3 0.0069 2026-07-29 VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated
CVE-2026-61515 critical 9.3 0.0244 2026-08-04 Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vul
CVE-2026-118579 high 8.9 0.0079 2026-10-28 A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main
CVE-2026-33280 high 8.6 0.0038 2026-03-27 Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to g
CVE-2026-1952 high 7.5 0.0027 2026-04-24 Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.
CVE-2026-114353 high 7.0 0.0015 2026-10-23 Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI Crysta
CVE-2026-4621 medium 6.3 0.0016 2026-03-27 Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable t