CVE-2026-102250None▾ SunlitCWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-31356NoneInsufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure
CVE-2025-15154Medium· 5.3A security vulnerability has been detected in PbootCMS up to 3.2.12
CVE-2026-108971Critical· 9.6A flaw has been found in D-Link DCS-930L B1.08B4
CVE-2026-49483NoneCode for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform
CVE-2026-66787High· 8.7A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes
CVE-2026-109365Low· 3.7Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies with valid header hashes