Disclosed Vulnerabilities

Title Vulnerability Disclosed Credit
broken authorization in Akia keyless entry lets an authenticated guest unlock other rooms GCVE-1-2026-20108 2026-09-28 09:06 Philipp Brügger
Unchecked MKPASSWD Implementations Created Rootless Login Debian Images GCVE-1-2026-20023 2026-09-04 13:02 Coordinator: Alice Xiang Yu Xuan (湘渝萱); Mitigation Developer: (Holloway) Chew, Kean Ho
DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion GCVE-1-2026-20096 2026-08-24 08:46 1. Abdelrahman Yousef 2. Dr. Jordan Samhi
DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution GCVE-1-2026-20018 2026-08-24 08:08 1. Abdelrahman Yousef 2. Dr. Jordan Samhi
DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media GCVE-1-2026-20169 2026-08-24 07:23 1. Abdelrahman Yousef 2. Dr. Jordan Samhi
DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory GCVE-1-2026-20042 2026-08-24 07:06 1. Abdelrahman Yousef 2. Dr. Jordan Samhi
DJI Drone Wi-Fi Credential Exposure Through Unencrypted Bluetooth Traffic GCVE-1-2026-20157 2026-08-23 10:24 1. Abdelrahman Yousef 2. Dr. Jordan Samhi
Reflected Cross-Site Scripting (XSS) in e107 CMS GCVE-115-2026-20035 2026-08-19 12:23 Adrian "syrex1013" Dacka
Missing authorization check on galaxy list fetched for event template create/edit view GCVE-1-2026-20008 2026-08-19 12:20 Jeroen Pinoy
Privilege escalation to platform admin in OpenCTI-Platform through broken access control in API CVE-2026-44730 2026-08-19 10:04 Jeroen Pinoy
displaying 1 - 10 vulnerability_disclosures in total 20