CVE Watch5 jul 2026

CVE-2025-28171

An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /c

CVSS

6.5

Medio

EPSS

0.3%

p22

KEV

—

Exploit Today

0-100

Publicado: 29 jul 2025 · Última mod.: 5 jul 2026 · CWE-922

EPSS · 30d

0.3%EPSS · 30 días0.4%

2026-06-302026-07-17

Descripción técnica

An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi.

Referencias oficiales

gist.github.comhttps://gist.github.com/Exek1el/a1fe4288f0df0a47068d618579c6b647

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2024-483527.5 ALT

37.8%

——11Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.14d CVE-2024-487708.2 ALT

35.0%

——11An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process.13d CVE-2025-452427.7 ALT

22.2%

——7Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php.14d