Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 30

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00101 Published 2026-10-27 Fixed in 6.3.26 CWE-352
Priority MEDIUM 40

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0038 Published 2026-10-27 Fixed in 6.3.26 CWE-352
Priority LOW 39

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00214 Published 2026-10-27 Fixed in 6.3.26, 2.4.2 +2 CWE-122
Priority LOW 39

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth User interaction EPSS 0.00194 Published 2026-10-27 Fixed in 6.3.26 CWE-79