Known Vulnerabilities for products from Carrier
Listed below are 16 of the newest known vulnerabilities associated with the vendor "Carrier".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-64190 json | Not Provided | 2026-07-20 | 2026-07-20 | |
| CVE-2026-58263 json | Not Provided | 2026-07-01 | 2026-07-02 | |
| CVE-2026-55223 json | Not Provided | 2026-06-30 | 2026-07-01 | |
| CVE-2026-50131 json | Not Provided | 2026-06-10 | 2026-06-11 | |
| CVE-2026-46592 json | Not Provided | 2026-07-06 | 2026-07-06 | |
| CVE-2026-43421 json | Not Provided | 2026-05-08 | 2026-06-19 | |
| CVE-2026-41687 json | Not Provided | 2026-05-07 | 2026-05-07 | |
| CVE-2026-41380 json | Not Provided | 2026-04-28 | 2026-04-29 | |
| CVE-2026-8678 json | Not Provided | 2026-07-11 | 2026-07-13 | |
| CVE-2026-0625 json | Not Provided | 2026-01-05 | 2026-05-25 | |
| CVE-2022-31486 json | An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell com... | 8.8 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31485 json | An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the we... | 5.3 - MEDIUM | 2022-06-06 | 2022-06-17 |
| CVE-2022-31484 json | An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnera... | 7.5 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31483 json | An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload t... | 8.8 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31482 json | An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffe... | 7.5 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31481 json | An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerabi... | 10 - CRITICAL | 2022-06-06 | 2022-06-17 |
| CVE-2022-31480 json | An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Serv... | 7.5 - HIGH | 2022-06-06 | 2022-06-17 |
| CVE-2022-31479 json | An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be ex... | 9.8 - CRITICAL | 2022-06-06 | 2023-06-29 |
| CVE-2022-26519 json | There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 30... | 5.5 - MEDIUM | 2022-04-20 | 2022-04-29 |
| CVE-2022-1318 json | Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuratio... | 5.5 - MEDIUM | 2022-04-20 | 2023-07-24 |