Unpatched Broadcom WPS flaw lets nearby attackers run code as root
Quentin Kaiser's own exploits read a Wi-Fi password and opened an over-the-air shell; he reports no real-world attacks.
74
Organization
CERT Coordination Center
- Mentions · 7d0
- Mentions · 30d1
- All mentions5
- First seenSep 10, 2026
- Last mentioned12d ago
Timeline
5 articles · newest firstCritical ViewSonic vCast Vulnerabilities Allow Attackers to Gain Full Control Over the Device
Unauthenticated ViewSonic vCast flaws can expose screens and install apps on ViewBoards.
70
ViewSonic vCast Vulnerabilities Let Attackers Gain Full Device Control Without Authentication
CERT/CC warns unauthenticated ViewSonic vCast flaws can capture screens, install apps, and fully control ViewBoards.
62
VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability
CERT warns Norwegian Cruise Line door readers accept cloned RFID UIDs, allowing forged keycards into restricted ship areas.
52
Skullcandy Dime 3 Bluetooth Flaw Lets Nearby Attackers Hijack Audio and Microphone
CERT/CC disclosed VU#859658: Skullcandy Dime 3 earbuds on firmware 1.0.0.28 accept unauthenticated Bluetooth pairing, letting nearby attackers hijack audio and microphone.
25
Related CVEs
by mentions- Unauthenticated input injection in ViewSonic ViewBoard vCast
- Unauthenticated APK install via ViewSonic ViewBoard vCast
- There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and…
- CVE-2025-207018%8.8In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent
- The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip
Appears with
- ViewSonicvendor · 2
- vCastproduct · 2
- ViewBoardproduct · 2
- Norwegian Cruise Lineorganization · 1
- Broadcomvendor · 1
- BBOX3V+product · 1
- Telenetorganization · 1
- Orange Belgiumorganization · 1
- Askeyvendor · 1
- Wi-Fi Protected Setupproduct · 1
- VOOorganization · 1
- Sagemcomvendor · 1
- NTAG212product · 1
- Skullcandyvendor · 1
- TCG3000product · 1
- Skullcandy Dime 3product · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.