Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-121817 1 About Time Technologies 1 Herowatch Go Server 2026-11-06 7.5 High
Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify specific parameters to access or operate other users' data and functions.
CVE-2026-121818 1 About Time Technologies 1 Herowatch Go 2026-11-06 7.8 High
Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers can exploit a publicly available test key to sign malicious programs, allowing them to elevate privileges and execute arbitrary code.