https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T23:05:57.695532+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-25818 fkie_cve-2026-25818 2026-11-06T23:05:57.713935+00:00

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cookies, allowing an attacker with a stolen session cookie to find the user password by brute-forcing an encryption parameter.

 https://db.gcve.eu/vuln/ghsa-278p-xrjq-m6gf GHSA-278p-xrjq-m6gf 2026-11-06T23:05:57.713991+00:00

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cookies, allowing an attacker with a stolen session cookie to find the user password by brute-forcing an encryption parameter.