NVD disclosure day

Published threat advisories for November 19, 2021

CVE-2021-41435

ASUS Router CAPTCHA Bypass Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A CAPTCHA protection bypass vulnerability in various ASUS Wi-Fi routers allows unauthenticated remote attackers to attempt unlimited login attempts, potentially leading to unauthorized access. The relevance and exposure of affected devices within an organization need to be confirmed to understand the risk.

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2021-44026

Roundcube Webmail SQL Injection Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Roundcube Webmail has a vulnerability in its search functionality. This flaw allows for unauthorized data access and could disrupt operations. Organizations using affected versions face business risk and potential data compromise.

NVD modified: NVD date unavailable • CISA KEV