| CVE-2026-50214 |
The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary…
|
9.3
Critique
|
4 juin 2026 |
| CVE-2026-50209 |
Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint…
|
9.3
Critique
|
4 juin 2026 |
| CVE-2026-50208 |
High-risk TrustAllCerts routines disable standard TLS certificate validation
|
9.2
Critique
|
4 juin 2026 |
| CVE-2026-49194 |
The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standard device login prompt entirely and…
|
9.4
Critique
|
4 juin 2026 |
| CVE-2026-49191 |
The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose…
|
9.3
Critique
|
4 juin 2026 |
| CVE-2026-49190 |
The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting…
|
9.4
Critique
|
4 juin 2026 |
| CVE-2026-49185 |
The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction…
|
10.0
Critique
|
4 juin 2026 |