Firmware-Vulnerability

Multiple GL.iNet router models running firmware versions up to 4.8.x contain an authorization bypass vulnerability in the WebDAV service, allowing remote unauthenticated attackers to manipulate file operations.

Voltronic Power SNMP Web Pro version 1.1 contains an unauthenticated RCE vulnerability allowing attackers to upload and execute malicious CGI scripts as root by bypassing session validation.

Multiple Zbtlink router models are susceptible to the ENDLESSDOORS root implant, which leverages the rctl remote control tool for unauthorized access and persistent phone-home capabilities.

A critical vulnerability, CVE-2026-4769, in certain WAGO System I/O Field series devices allows an unauthenticated remote attacker to gain full system compromise by accessing an undocumented internal diagnostic capability during the initial startup sequence.

Multiple high-severity vulnerabilities exist within the EDK2 NetworkPkg IP stack implementation, allowing an attacker, either from an adjacent network or remotely and anonymously, to achieve arbitrary code execution, disclose confidential information, and trigger a denial of service condition, impacting the low-level networking capabilities and security of systems utilizing this firmware component.