https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 13:06:30 +0000 https://db.gcve.eu/vuln/cve-2026-125297 <p><strong>Affected:</strong> AsiaInfo International Business Support System, AsiaInfo International aether-menu</p> <p>AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API &#39;/bss/sysmgnt/api/&#39;. A remote, unauthenticated attacker could provision a new account with administrative privileges or take over existing accounts, and perform other administrative actions. Fixed in 9.2.41.</p> <p><strong>Affected:</strong> AsiaInfo International Business Support System, AsiaInfo International aether-menu</p> <p>AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API &#39;/bss/sysmgnt/api/&#39;. A remote, unauthenticated attacker could provision a new account with administrative privileges or take over existing accounts, and perform other administrative actions. Fixed in 9.2.41.</p> https://db.gcve.eu/vuln/cve-2026-125297