ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 5h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 8h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 8h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 9h Vulnerabilitas in software Sparx Systems Enterprise Architect · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilitates in Slican telephonis · 10h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 13h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 14h ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 5h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 8h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 8h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 9h Vulnerabilitas in software Sparx Systems Enterprise Architect · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilitates in Slican telephonis · 10h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 13h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 14h

ACyber Sentinel Turma Aestimationis Securitatis

← Redire

⚠️ Renuntiatio Vulnerabilitatis

CVE-2026-82929

MEDIUM CVSS 6.3 CVSS 4.0 📌 Deferred

CVE-2026-82929 - Use of Shared Cryptographic Key in mH-DEVELOPER

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential interception.

This issue was fixed in version 3.0.30

Publicatum: Sep 28, 2026 13:17

Ultima Mutatio: Sep 28, 2026 16:31