Publish Advisories

GHSA-7pqm-gjrm-wf96
GHSA-rgpf-x2pq-6m4q

Author: advisory-database[bot]

advisories/unreviewed/2026/03/GHSA-7pqm-gjrm-wf96/GHSA-7pqm-gjrm-wf96.json

@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7pqm-gjrm-wf96",
+  "modified": "2026-03-07T21:33:41Z",
+  "published": "2026-03-07T21:33:41Z",
+  "aliases": [
+    "CVE-2026-3669"
+  ],
+  "details": "A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads to improper authorization. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3669"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/Lytes/2bd9cb3faf89b114754f00292beabb38"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.349557"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.349557"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.764703"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-03-07T19:15:48Z"
+  }
+}

advisories/unreviewed/2026/03/GHSA-rgpf-x2pq-6m4q/GHSA-rgpf-x2pq-6m4q.json

@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rgpf-x2pq-6m4q",
+  "modified": "2026-03-07T21:33:41Z",
+  "published": "2026-03-07T21:33:41Z",
+  "aliases": [
+    "CVE-2026-3670"
+  ],
+  "details": "A vulnerability was detected in Freedom Factory dGEN1 up to 20260221. Affected is an unknown function of the component com.dgen.alarm. Performing a manipulation results in improper authorization. The attack requires a local approach. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3670"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/Lytes/0accda73c896ea137db832dc4d81345c"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.349558"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.349558"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.764704"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-03-07T19:15:49Z"
+  }
+}