Xinan Zhou

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26.3 **Description** A permissions issue existed where an application could potentially access protected user data. This was addressed through the implementation of additional restrictions. **Recommendations** Update to macOS Tahoe 26.3.

**Name of the Vulnerable Software and Affected Versions** macOS Sequoia versions prior to 15.7.4 macOS Sonoma versions prior to 14.8.4 macOS Tahoe versions prior to 26.3 tvOS versions prior to 26.3 watchOS versions prior to 26.3 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 visionOS versions prior to 26.3 **Description** A logic issue exists that was addressed through improved checks. An attacker positioned on a privileged network may be able to intercept network traffic. **Recommendations** Update macOS Sequoia to version 15.7.4. Update macOS Sonoma to version 14.8.4. Update macOS Tahoe to version 26.3. Update tvOS to version 26.3. Update watchOS to version 26.3. Update iOS to version 18.7.5. Update iPadOS to version 18.7.5. Update visionOS to version 26.3.

**Name of the Vulnerable Software and Affected Versions** NETGEAR Orbi 760 (affected versions not specified) **Description** This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. The specific flaw exists within the implementation of the SOAP API, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Chipolo ONE Bluetooth tracker (2020) version 4.13.0 Chipolo iOS app version 4.13.0 **Description** The issue concerns Incorrect Access Control, allowing access revocation evasion attacks. Once a malicious sharee obtains access credentials, Chipolo devices can be affected. **Recommendations** For Chipolo ONE Bluetooth tracker (2020) version 4.13.0, update the Chipolo iOS app to a version that addresses the access control issue. For Chipolo iOS app version 4.13.0, consider restricting access to sensitive features until a patch is available.

**Name of the Vulnerable Software and Affected Versions** NETGEAR R6400v2 version not specified NETGEAR R6700v3 version not specified NETGEAR R7000 version not specified NETGEAR R8500 version not specified NETGEAR RAX15 version not specified NETGEAR RAX20 version not specified NETGEAR RAX35v2 version not specified NETGEAR RAX38v2 version not specified NETGEAR RAX40v2 version not specified NETGEAR RAX42 version not specified NETGEAR RAX43 version not specified NETGEAR RAX45 version not specified NETGEAR RAX48 version not specified NETGEAR RAX50 version not specified NETGEAR RAX50S version not specified NETGEAR LAX20 version not specified **Description** This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the `readycloud control.cgi` file, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this issue to execute code in the context of root. The exploitation of this issue may allow a remote attacker to bypass authentication via an alternative name. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETGEAR R7000 version 1.0.11.116 10.2.100 NETGEAR D7000v2 (affected versions not specified) NETGEAR R6400 (affected versions not specified) NETGEAR R6400v2 (affected versions not specified) NETGEAR R6700v3 (affected versions not specified) NETGEAR R6900P (affected versions not specified) NETGEAR R7000P (affected versions not specified) NETGEAR R8300 (affected versions not specified) NETGEAR R8500 (affected versions not specified) NETGEAR RS400 (affected versions not specified) NETGEAR XR300 (affected versions not specified) **Description** This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the processing of SOAP requests, resulting from the lack of proper authentication verification before performing a password reset. An attacker can leverage this issue to reset the admin password. The vulnerability is related to deficiencies in the authentication procedure before executing a password reset. **Recommendations** For NETGEAR R7000 version 1.0.11.116 10.2.100, consider disabling the SOAP request processing functionality until a patch is available. For other affected NETGEAR models, at the moment, there is no information about a newer version that contains a fix for this issue.