Threats tagged 'ghsa-h9f9-r2j7-9685'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.8	CVE-2025-26411An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to High8.82025-02-11GCVE DatabaseCVE-2025-26411 An authenticated attacker with a valid user account on the Wattsense Bridge web interface can exploit the Plugin Manager to upload malicious Python files. This vulnerability allows the attacker to gain remote root access to the device. The issue is addressed in firmware versions BSP 6.1.0 and later. Report on CVE-2025-26411 Vulnerability CWE-434 #ghsa-h9f9-r2j7-9685	GCVE Database	2025-02-11

Page 1 of 1