WID-SEC-W-2026-1706

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Jabra Direct: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

view advisory published 2026-05-27

Ein Angreifer kann mehrere Schwachstellen in Jabra Direct ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-22871US——
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjuncti…
CVE-2023-24531US——
Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can caus…
CVE-2024-24790UScritical9.8—
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditio…
CVE-2023-29827UScritical9.8—
ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDe…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan