https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T03:17:21.790574+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2018-22563 cnvd-2018-22563 2026-10-12T03:17:22.122765+00:00 cnvd-2018-22563 https://vulnerability.circl.lu/vuln/fkie_cve-2018-12257 fkie_cve-2018-12257 2026-10-12T03:17:22.122844+00:00

An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hijacking. An authenticated root user with CLI access is able to remotely upgrade firmware to a custom image due to lack of SSL validation by changing the nameservers in /etc/resolv.conf to the attacker's server, and serving the expected HTTPS response containing new firmware for the device to download.

 https://vulnerability.circl.lu/vuln/ghsa-6222-ghhf-xmx8 GHSA-6222-ghhf-xmx8 2026-10-12T03:17:22.122915+00:00

An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hijacking. An authenticated root user with CLI access is able to remotely upgrade firmware to a custom image due to lack of SSL validation by changing the nameservers in /etc/resolv.conf to the attacker's server, and serving the expected HTTPS response containing new firmware for the device to download.

 https://vulnerability.circl.lu/vuln/gsd-2018-12257 gsd-2018-12257 2026-10-12T03:17:22.122953+00:00 gsd-2018-12257 https://vulnerability.circl.lu/vuln/var-201806-0709 VAR-201806-0709 2026-10-12T03:17:22.122975+00:00

An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hijacking. An authenticated root user with CLI access is able to remotely upgrade firmware to a custom image due to lack of SSL validation by changing the nameservers in /etc/resolv.conf to the attacker's server, and serving the expected HTTPS response containing new firmware for the device to download. The MomentumAxel720P is a dual-band HD camera that supports WiFi connectivity. A security vulnerability exists in the MomentumAxel720P version 5.1.8, which is due to a lack of verification of SSL by the program