Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-6987 1 Sipeed 1 Picoclaw 2026-04-27 7.3 High
A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-32296 1 Sipeed 1 Nanokvm 2026-03-24 8.2 High
Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate the KVM process.