CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Oray Pugongying X5 Pro Router Improper Authorization Vulnerability (CVE-2026-120224)
[Affected Scope] Oray Pugongying X5 Pro router versions up to and including 7.6.1
[Impact] A restricted account can bypass authorization checks to remotely invoke sensitive administrative functions, such as a factory reset, via manipulated JSON batch API requests
[Mitigation] Restrict external access to the router's management interface and apply temporary access control lists (ACLs) until an official patch is released
QNAP HBS 3 (Hybrid Backup Sync) Improper Authorization Vulnerability (CVE-2021-28799) Security Advisory
[Affected Scope] QNAP HBS 3 (Hybrid Backup Sync) running on QTS, QuTS hero, and QuTScloud operating systems
[Impact] Unauthenticated remote attackers can exploit improper authorization to log in to the device with administrative privileges, potentially leading to full system compromise
[Mitigation] Immediately update HBS 3 to the patched versions and restrict external internet access to the NAS management interface
NETGEAR JGS516PE Missing Function-Level Access Control Vulnerability (CVE-2020-26919) Analysis and Mitigation Guide
[Affected Scope] NETGEAR JGS516PE devices running firmware versions prior to 2.6.0.43
[Impact] Unauthenticated remote attackers can bypass authentication to access sensitive management functions, potentially leading to arbitrary command execution and full device compromise
[Mitigation] Immediately upgrade the JGS516PE firmware to version 2.6.0.43 or later and restrict access to the management interface