Vulnerabilities (CVE)

Filtered by CWE-1310
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-85544 2026-09-18 N/A 6.1 MEDIUM
Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards.
CVE-2026-59847 2 Libssh, Redhat 3 Libssh, Enterprise Linux, Hardened Images 2026-09-04 N/A 5.9 MEDIUM
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.
CVE-2025-55338 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-06-17 N/A 6.1 MEDIUM
Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.