2026-11-04
Qihoo 360 router firmware through 6.4.9 contains an improper cryptographic signature verification flaw in the verify_sign function of fs2/bin/iscm, within the Firmware Signature Verification component on models D621-2, D603-2, D600-2, D619, D606-6 and D706. Manipulating the sign argument can cause a signature to be accepted when it should be rejected, giving a network-reachable, unauthenticated attacker potential high confidentiality, integrity and availability impact per the CVSS vector, although the exact network-facing trigger is not described in the available sources. A public PoC reference exists; it is not verified as working exploit code, no CISA KEV confirmation is provided, and no fixed firmware version is published, so the act_now priority rests largely on a single source.
Unauthenticated remote code execution in Quest Foglight for Databases lets any network attacker who can reach the RMI service execute arbitrary code in the context of SYSTEM. The flaw sits in the configuration of the baseRmiServiceExporter bean, which deserializes attacker-supplied data without validation (CWE-502); the assessed vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8), meaning no credentials and no user interaction are needed. This is a genuine high-priority issue: the only meaningful limiter is whether the RMI listener is reachable from untrusted networks, so Foglight deployments exposed beyond a trusted segment should be treated as urgent (priority label act_now); no public exploit code has been identified at time of analysis and the vulnerability is not listed as actively exploited in the supplied data.
Remote code execution in Quest Foglight for Databases allows remote, unauthenticated attackers to direct a file write to an attacker-chosen path through the writeTopologySectionToFile method and run code in the SYSTEM context (CVSS 9.8, CWE-73). All available severity signals align, and the issue carries an act_now priority label, but no public exploit code and no CISA KEV entry are identified at time of analysis. The supplied data does not specify an affected version range or fixed build, so scope and remediation should be confirmed against the ZDI advisory ZDI-26-861 and Quest's own guidance.
Remote unauthenticated code execution in Quest Foglight for Databases allows network attackers to reach the ForgeMBeanServerSupport module without credentials and execute arbitrary code as SYSTEM. The defect is a missing authentication check (CWE-306) in an exposed MBean server component, rated CVSS 9.8 and flagged act_now by vuln.today priority. No CISA KEV entry or public exploit code is identified in the provided data; practical exposure depends on whether the Foglight management/MBean service is reachable from untrusted networks.
NoMachine's nxwebrunner web service, which listens on TCP port 4443 by default, fails to validate the length of user-supplied data before copying it into a fixed-size heap buffer, allowing an unauthenticated attacker with network reachability to that port to execute arbitrary code as the web service account. The flaw is rated critical (CVSS 3.1 base 9.8, AV:N/AC:L/PR:N/UI:N) and carries an act_now priority label from vuln.today; no CISA KEV entry, EPSS value, or confirmed public exploit code was supplied with this report, so active exploitation is not established. Hosts where port 4443 is firewalled, bound to localhost, or where the web service is disabled are not remotely exposed.