CVEs published by MHV

CVEs published by MHV (CVE Numbering Authority). 11 tracked.

CVE-2026-2754 HIGH 7.5 UPGRADE Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API e
CVE-2026-2753 HIGH 7.5 UPGRADE An Absolute Path Traversal vulnerability exists in Navtor NavBox
CVE-2026-2752 MEDIUM 5.3 UPGRADE Navtor NavBox allows information disclosure via the /api/ais-data endpoint
CVE-2026-2250 HIGH 7.5 The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication
CVE-2026-2249 CRITICAL 9.8 METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does
CVE-2026-2248 CRITICAL 9.8 METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does
CVE-2026-22240 HIGH 7.5 MITIGATE The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposur
CVE-2026-22239 MEDIUM 5.3 MITIGATE The vulnerability exists in BLUVOYIX due to design flaws in the email sending API
CVE-2026-22238 CRITICAL 9.8 MITIGATE The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs
CVE-2026-22237 CRITICAL 9.8 MITIGATE The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation
CVE-2026-22236 CRITICAL 9.8 MITIGATE The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs