CVE-2026-40425
The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authent
CVSS
5.7
Medio
EPSS
0.4%
p31
KEV
—
Exploit Today
9
0-100
Publicado: 29 may 2026 · Última mod.: 20 jul 2026 · CWE-552
0.4%EPSS · 30 días0.4%
2026-08-232026-09-20
The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-546297.5 ALT60.2%
——18Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtual table modules such as csv_reader and log_reader through its MySQL-compatible server port without authentication, authorization, or directory restrictions. A remote attacker can use SQLite CREATE VIRTUAL TABLE statements to provide a local path to these modules, which use hashicorp/go-getter under the Anyquery server process and return the selected file contents as queryable table rows. The disclosure is limited only by the filesystem permissions of the server process and can expose system configuration, credentials, and private keys. This issue is fixed in version 0.4.5.6dCVE-2026-77884—25.2%
——8Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage.3dCVE-2026-804948.6 ALT24.7%
——7The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, including files containing sensitive credentials.6dCVE-2026-688315.5 MED31.6%
——9Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.5dCVE-2026-751646.5 MED34.4%
——10An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to retrieve arbitrary files from the device filesystem via the file query string parameter.13dCVE-2026-748536.8 MED14.6%
——4The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with the author role and above to read arbitrary files from the server, including files outside the web root. Only sites using the restricted display-callback mode are affected, which is the automatic default on installations whose first Pods version predates 3.1.13d