Do Son Five RDK-B WebUI vulnerabilities let attackers bypass authentication and gain admin access on broadband gateways. No patch is available yet.
WebUI
Open5GS WebUI vulnerability CVE-2026-0622 uses the default secret "change-me," allowing attackers to forge admin tokens. Patch now or update your keys.
A Critical (CVSS 9.7) DNS rebinding flaw (CVE-2025-59159) in the SillyTavern LLM interface allows remote attackers to seize full control of local AI instances and steal API keys.