Skip to content
OpenAdvisories

Vendor

leiweibau

3 known vulnerabilities.

Products

Pi.Alert 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-44887

    Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Path)

    Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's web-based configuration editor allows arbitrary Python code to be injected into pialert.conf. Since the background scan daemon loads this file via Python's…

    leiweibau Pi.Alert
  • Critical 9.8
    CVE-2026-44888

    Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Interger)

    Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's SaveConfigFile() endpoint writes user-supplied numeric config values (e.g., SMTP_PORT) directly into pialert.conf without validation. Since pialert.conf is…

    leiweibau Pi.Alert