Leiweibau vulnerabilities
We track 3 vulnerabilities in Leiweibau products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2026.
Latest Leiweibau vulnerabilities
- 9.8 Critical severity
Pi.Alert: Improper Control of Generation of Code
Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's SaveConfigFile() endpoint writes user-supplied numeric config values (e.g., SMTP_PORT) directly into pialert.conf without validation. Since pialert.conf is
- 9.8 Critical severity
Pi.Alert: Improper Control of Generation of Code
Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's web-based configuration editor allows arbitrary Python code to be injected into pialert.conf. Since the background scan daemon loads this file via Python's
- 8.7 High severity
Pi.Alert: Improper Neutralization of Special Elements used in an SQL Command
Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 2024-06-29 to before 2026-05-07, the web application endpoint is vulnerable to SQL injection. The /pialert/php/server/devices.php route accepts requests from unauthenticated users whe