Public Security Advisories

Proof of Possession.

Coordinated vulnerability disclosures from Argus. Findings, impact, and remediation, published in good faith.

187
Advisories
5
Critical
16
High
2026
Latest

Disclosed

28
  • HIGH BYTERAY-2026-0027 Disclosed

    OS Command Injection via Web Interface

    User-controlled CGI parameters and request-derived buffers are embedded into shell command strings and executed without sanitization.

    CVE-2026-6822, CVE-2026-6259Inhand Networks / 5G Modem#binary
  • HIGH BYTERAY-2026-0026 Disclosed

    Hardcoded Default Credentials

    A hardcoded default admin password literal is embedded in the binary and used in authentication comparisons.

    CVE-2026-6822, CVE-2026-6259Inhand Networks / 5G Modem#binary
  • MEDIUM BYTERAY-2026-0025 Disclosed

    Sensitive Data Exposure in Logs

    Captive portal credentials are written to syslog in plaintext on authentication failure.

    CVE-2026-6822, CVE-2026-6259Inhand Networks / 5G Modem#binary

Under Embargo

159