Skip to content
Threat Feed

Tag

Router

84 briefs RSS
high threat

UTT HiPER 1200GW Stack-Based Buffer Overflow Vulnerability (CVE-2026-10293)

A stack-based buffer overflow vulnerability (CVE-2026-10293) exists in UTT HiPER 1200GW up to version 2.5.3-170306 due to the strcpy function in /goform/formFireWall, allowing remote exploitation via manipulation of the Profile argument.

exploited HiPER 1200GW cve buffer-overflow router network-device
2r 1t 1c
high advisory

CVE-2026-10192 - Tenda W12 Stack-Based Buffer Overflow in set_local_time_0

A stack-based buffer overflow vulnerability exists in Tenda W12 version 3.0.0.7(4763) in the `set_local_time_0` function, which allows a remote attacker to execute arbitrary code by manipulating the Time argument.

W12 3.0.0.7 cve buffer_overflow tenda router
2r 1t 1c
critical threat

Totolink N300RH Stack-Based Buffer Overflow Vulnerability (CVE-2026-10187)

A stack-based buffer overflow vulnerability, CVE-2026-10187, exists in the setWiFiBasicConfig function of the wireless.so file in the Web Management Interface of Totolink N300RH version 6.1c.1353_B20190305, allowing a remote attacker to execute arbitrary code by manipulating the KeyStr argument.

N300RH 6.1c.1353_B20190305 stack-buffer-overflow remote-code-execution router
2r 1t 1c
critical threat

Edimax BR-6478AC Stack-Based Buffer Overflow Vulnerability (CVE-2026-10125)

A stack-based buffer overflow vulnerability (CVE-2026-10125) exists in the formPPPoESetup function of the /goform/formPPPoESetup file in Edimax BR-6478AC version 1.23, allowing a remote attacker to execute arbitrary code by manipulating the pppUserName argument in a POST request; a public exploit is available.

BR-6478AC 1.23 cve CVE-2026-10125 buffer overflow edimax router rce
2r 1t 1c
high threat

Shibby Tomato Stack-Based Buffer Overflow Vulnerability (CVE-2026-10124)

A stack-based buffer overflow vulnerability exists in Shibby Tomato up to version 1.28 in the rip_zebra_read_ipv4 function within the /usr/sbin/ripd component (Zserv Handler), allowing a remote attacker to execute arbitrary code.

Tomato +1 cve buffer-overflow router
2r 1t 1c
high advisory

TRENDnet TEW-432BRP Stack-Based Buffer Overflow Vulnerability (CVE-2026-10062)

TRENDnet TEW-432BRP version 3.10B20 is vulnerable to a stack-based buffer overflow via manipulation of the ip/mask/gateway arguments in the formSetRoute function of the /goform/formSetRoute file, enabling remote attackers to potentially execute arbitrary code.

TEW-432BRP 3.10B20 cve buffer-overflow router
2r 1c
high advisory

ZTE H298A/H108N Unauthenticated Credential Exposure

A public exploit (EDB-52592) has been published for ZTE H298A and H108N routers, which allows unauthenticated access to sensitive credentials.

H298A +1 credential-exposure router exploit
2r 1t
high advisory

ZTE ZXHN H188A V6 Authentication Bypass Vulnerability

A public exploit is available for an authentication bypass vulnerability affecting ZTE ZXHN H188A V6, increasing the risk to unpatched devices.

ZXHN H188A V6 authentication-bypass router exploit
2r 1t
critical threat

Tenda F1202 Stack-Based Buffer Overflow Vulnerability (CVE-2026-9431)

A remote stack-based buffer overflow vulnerability (CVE-2026-9431) exists in the fromPptpUserAdd function of the /goform/PptpUserAdd file in Tenda F1202 firmware version 1.2.0.20(408), allowing unauthenticated attackers to potentially execute arbitrary code.

exploited F1202 1.2.0.20 cve buffer-overflow tenda router rce
2r 1t 1c
high advisory

Tenda F1202 Stack-Based Buffer Overflow Vulnerability (CVE-2026-9430)

A stack-based buffer overflow vulnerability (CVE-2026-9430) exists in Tenda F1202 version 1.2.0.20(408) due to manipulation of the 'dips' argument in the 'formGstDhcpSetSer' function of '/goform/GstDhcpSetSerof', allowing remote code execution.

F1202 1.2.0.20 cve buffer-overflow router tenda
2r 2t 1c
critical advisory

Totolink A8000RU Command Injection Vulnerability (CVE-2026-9408)

Totolink A8000RU version 7.1cu.643_b20200521 is vulnerable to command injection via the setStaticDhcpRules function in the /cgi-bin/cstecgi.cgi file, allowing remote attackers to execute arbitrary OS commands by manipulating the 'enable' argument, and a public exploit is available.

A8000RU 7.1cu.643_b20200521 cve command injection router network device
3r 1t 1c
high threat

Edimax BR-6428NS Buffer Overflow Vulnerability (CVE-2026-9294)

A buffer overflow vulnerability (CVE-2026-9294) exists in the formWanTcpipSetup function of the /goform/formWanTcpipSetup file in Edimax BR-6428NS 1.10, which can be triggered by a remote attacker manipulating the pppUserName argument via a POST request, potentially leading to arbitrary code execution.

exploited BR-6428NS 1.10 buffer-overflow router cve
2r 1t 1c
high advisory

Huawei Router Vulnerability Enables Information Disclosure and Admin Access

An anonymous remote attacker can exploit a vulnerability in Huawei routers to disclose sensitive information, potentially leading to administrative access.

Router huawei information-disclosure initial-access network
2r 1t
high threat

EFM ipTIME A8004T Stack-Based Buffer Overflow (CVE-2026-8234)

A stack-based buffer overflow vulnerability (CVE-2026-8234) exists in EFM ipTIME A8004T version 14.18.2, allowing remote attackers to execute arbitrary code by manipulating the security_5g argument in the formWifiBasicSet function.

ipTIME A8004T 14.18.2 cve buffer overflow router rce
1r 1t 1c
high threat

Totolink X5000R Buffer Overflow Vulnerability (CVE-2026-8137)

A buffer overflow vulnerability (CVE-2026-8137) exists in the Totolink X5000R router version 9.1.0u.6369_B20230113, allowing remote attackers to execute arbitrary code via manipulation of the 'submit-url' argument in the /boafrm/formDdns file.

X5000R 9.1.0u.6369_B20230113 cve buffer overflow router remote code execution
2r 1t 1c
high advisory

D-Link DI-8100 Web Management Interface Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in D-Link DI-8100 version 16.07.26A1 affecting the Web Management Interface component via manipulation of the Name argument in the /url_member.asp file, enabling a remote attacker to potentially execute arbitrary code; an exploit is publicly available.

DI-8100 buffer-overflow web-application router
2r 1t 1c 1i
high advisory

D-Link DI-8100 Buffer Overflow Vulnerability

A remote buffer overflow vulnerability exists in the sprintf function of the /user_group.asp file within the CGI Handler component of D-Link DI-8100 version 16.07.26A1, potentially leading to arbitrary code execution.

DI-8100 16.07.26A1 buffer-overflow cgi-handler remote-code-execution router
2r 1c
high advisory

D-Link DI-8100 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability exists in D-Link DI-8100 with firmware version 16.07.26A1, affecting the sprintf function in the yyxz.asp file; manipulation of the ID argument can lead to remote exploitation.

DI-8100 firmware 16.07.26A1 buffer-overflow d-link router cve-2026-7851
2r 1t 1c
high advisory

Totolink N300RH Buffer Overflow Vulnerability in setWanConfig

A buffer overflow vulnerability exists in Totolink N300RH version 3.2.4-B20220812, specifically affecting the setWanConfig function within the /cgi-bin/cstecgi.cgi file, allowing a remote attacker to exploit it by manipulating the priDns argument in a POST request.

N300RH 3.2.4-B20220812 buffer-overflow router cve-2026-7749
2r 1t 1c
critical advisory

Totolink N300RH Buffer Overflow Vulnerability (CVE-2026-7750)

A buffer overflow vulnerability exists in Totolink N300RH 3.2.4-B20220812 allowing remote attackers to execute arbitrary code by manipulating the mac_address argument in the setMacFilterRules function of the /cgi-bin/cstecgi.cgi POST request handler.

N300RH 3.2.4-B20220812 buffer-overflow router cve webserver
2r 1t 1c
critical threat

Totolink WA300 Buffer Overflow Vulnerability in UploadCustomModule

A remote buffer overflow vulnerability exists in the UploadCustomModule function of the /cgi-bin/cstecgi.cgi file in the POST Request Handler component of Totolink WA300 version 5.2cu.7112_B20190227, which can be exploited by manipulating the File argument.

WA300 5.2cu.7112_B20190227 buffer-overflow remote-code-execution router
2r 1t 1c
critical advisory

Edimax BR-6208AC Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Edimax BR-6208AC devices (<= 1.02) via manipulation of the pptpDfGateway argument in the /goform/setWAN endpoint, potentially allowing remote attackers to execute arbitrary code.

BR-6208AC buffer overflow cve-2026-7685 router webserver
2r 1t 1c
critical threat

UTT HiPER 1200GW Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in UTT HiPER 1200GW devices up to version 2.5.3-170306, stemming from manipulation of the `strcpy` function in the `/goform/formRemoteControl` file, which allows remote attackers to execute arbitrary code.

HiPER 1200GW buffer-overflow iot router cve
2r 1t 1c
critical advisory

Tenda 4G300 Stack-Based Buffer Overflow Vulnerability

A remote stack-based buffer overflow vulnerability exists in the Tenda 4G300 router, version US_4G300V1.0Mt_V1.01.42_CN_TDC01, allowing an attacker to potentially execute arbitrary code by manipulating the 'page' argument to the sub_427C3C function in the /goform/SafeMacFilter file.

4G300 buffer-overflow tenda router cve-2026-7470
2r 2t 1c
critical advisory

D-Link DIR-825M Remote Buffer Overflow Vulnerability

D-Link DIR-825M version 1.1.12 is vulnerable to a buffer overflow via manipulation of the submit-url argument in the /boafrm/formWanConfigSetup file's sub_414BA8 function, allowing a remote attacker to execute arbitrary code.

DIR-825M buffer-overflow router dlink cve
2r 1t 1c
critical advisory

Tenda HG3 v2.0 Stack-Based Buffer Overflow in formUploadConfig

A stack-based buffer overflow vulnerability in the formUploadConfig function of Tenda HG3 v2.0's /boaform/formIPv6Routing file allows remote attackers to execute arbitrary code by manipulating the destNet argument.

HG3 cve-2026-7151 buffer-overflow tenda router
2r 2t 1c
critical advisory

Totolink A8000RU OS Command Injection Vulnerability

Totolink A8000RU version 7.1cu.643_b20200521 is vulnerable to OS command injection via manipulation of the `wifiOff` argument in the `setWiFiBasicCfg` function of the `/cgi-bin/cstecgi.cgi` CGI handler, allowing a remote attacker to execute arbitrary commands on the system.

A8000RU cve-2026-7241 command-injection router
2r 1t 1c
critical advisory

D-Link DI-8100 Remote Buffer Overflow Vulnerability

A buffer overflow vulnerability in the D-Link DI-8100 router allows remote attackers to execute arbitrary code by manipulating the 'fn' argument in the tgfile_htm function of the CGI endpoint.

DI-8100 cve-2026-7248 buffer-overflow d-link router
2r 1t 1c
critical advisory

Totolink A8000RU OS Command Injection Vulnerability (CVE-2026-7240)

CVE-2026-7240 is a critical OS command injection vulnerability in the Totolink A8000RU router that allows remote attackers to execute arbitrary commands by manipulating the 'User' argument in the 'setVpnAccountCfg' function.

A8000RU 7.1cu.643_b20200521 cve-2026-7240 command-injection totolink router cgi
2r 1t 1c
high advisory

Totolink N300RT Buffer Overflow Vulnerability (CVE-2026-7219)

A remote buffer overflow vulnerability exists in Totolink N300RT 3.4.0-B20250430 via manipulation of the 'entry_name' argument in the /boafrm/formIpQoS file, potentially leading to arbitrary code execution.

N300RT buffer-overflow iot router cve-2026-7219
2r 1t 1c
high advisory

Moxa Security Advisory Addresses Vulnerabilities in Multiple Router Series

Moxa released a security advisory addressing CVE-2026-3867 and CVE-2026-3868, which affect TN-4900, EDR-8010, EDR-G9010, OnCell G4302-LTE4, OnCell G4308-LTE4, and EDF-G1002-BP series routers, potentially allowing for unauthorized access and control.

TN-4900 Series +5 vulnerability router industrial-control-systems
3r 2c
critical advisory

Tenda F456 Router Buffer Overflow Vulnerability (CVE-2026-7101)

A buffer overflow vulnerability in Tenda F456 version 1.0.0.5 allows remote attackers to execute arbitrary code via a crafted request to the fromWrlclientSet function in the /goform/WrlclientSet file of the httpd component.

F456 cve-2026-7101 buffer-overflow router tenda remote-code-execution
2r 1t 1c
critical advisory

Tenda F456 Router Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Tenda F456 version 1.0.0.5 in the `fromGstDhcpSetSer` function, allowing remote attackers to execute arbitrary code by manipulating the 'dips' argument via a crafted HTTP request to `/goform/GstDhcpSetSer`.

F456 cve buffer_overflow router
2r 1t 1c
critical advisory

Linksys MR9600 Command Injection Vulnerability (CVE-2026-6992)

CVE-2026-6992 is a command injection vulnerability in the Linksys MR9600 router that allows remote attackers to execute arbitrary OS commands by manipulating the 'pin' argument in the BTRequestGetSmartConnectStatus function.

MR9600 cve-2026-6992 command-injection router rce
2r 2t 1c
critical advisory

Tenda F456 Router Buffer Overflow Vulnerability

A buffer overflow vulnerability in Tenda F456 router version 1.0.0.5 allows a remote attacker to execute arbitrary code by exploiting the fromSafeClientFilter function in the /goform/SafeClientFilter endpoint through manipulation of the 'menufacturer/Go' argument.

F456 1.0.0.5 buffer-overflow remote-code-execution cve-2026-7033 router
2r 1t 1c
critical advisory

Tenda F451 Router Buffer Overflow Vulnerability

A buffer overflow vulnerability (CVE-2026-6631) in Tenda F451 router version 1.0.0.7_cn_svn7958 allows remote attackers to execute arbitrary code by manipulating the 'page' argument in the /goform/webExcptypemanFilter component.

tenda router buffer_overflow cve-2026-6631 webserver
2r 2t
critical advisory

H3C Magic B1 Router Buffer Overflow Vulnerability

A buffer overflow vulnerability (CVE-2026-6581) in H3C Magic B1 routers allows remote attackers to execute arbitrary code by manipulating the 'param' argument in the SetMobileAPInfoById function.

cve-2026-6581 buffer-overflow router h3c
2r 1t 1c
critical advisory

H3C Magic B0 Router Buffer Overflow Vulnerability (CVE-2026-6560)

A buffer overflow vulnerability (CVE-2026-6560) in H3C Magic B0 up to 100R002 allows remote attackers to execute arbitrary code by manipulating the 'param' argument in the Edit_BasicSSID function of the /goform/aspForm file.

buffer overflow cve-2026-6560 h3c router network device
2r 1t 1c
high advisory

Wavlink WL-WN530H4 OS Command Injection Vulnerability

A remote command injection vulnerability exists in the Wavlink WL-WN530H4 router, specifically in the `strcat/snprintf` function of the `/cgi-bin/internet.cgi` file, allowing attackers to execute arbitrary OS commands.

command-injection router cve-2026-6483
2r 2t 1c
critical advisory

Totolink A3002MU Router Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability (CVE-2026-6194) exists in the Totolink A3002MU B20211125.1046 router firmware, specifically affecting the `/boafrm/formWlanSetup` component's HTTP request handler, which allows remote attackers to execute arbitrary code by manipulating the `wan-url` argument.

cve-2026-6194 buffer-overflow totolink router
2r 7t 1c
critical advisory

TOTOLINK A7000R Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability (CVE-2026-6168) exists in TOTOLINK A7000R devices up to version 9.1.0u.6115, allowing remote attackers to execute arbitrary code via a crafted ssid5g argument to the setWiFiEasyGuestCfg function in /cgi-bin/cstecgi.cgi.

totolink buffer-overflow cve-2026-6168 router
2r 1t 1c
critical advisory

Totolink A800R Remote Buffer Overflow Vulnerability

A remote buffer overflow vulnerability exists in the Totolink A800R router version 4.1.2cu.5137_B20200730, allowing unauthenticated attackers to potentially execute arbitrary code by overflowing the apcliSsid argument in the setAppEasyWizardConfig function within the /lib/cste_modules/app.so library.

cve-2026-6157 buffer-overflow router iot
2r 3t 1c
critical advisory

Across DR-810 Unauthenticated File Disclosure Vulnerability

Across DR-810 routers are vulnerable to unauthenticated file disclosure, allowing remote attackers to download the rom-0 backup file containing sensitive information, such as router passwords and configuration data, via a simple GET request to the rom-0 endpoint.

cve-2019-25706 file-disclosure router network
2r 1t 1c
critical advisory

Tenda F451 Router Stack-Based Buffer Overflow Vulnerability

A remote stack-based buffer overflow vulnerability exists in the fromDhcpListClient function of the /goform/DhcpListClient component (httpd) within Tenda F451 firmware version 1.0.0.7, triggered by manipulating the 'page' argument, potentially allowing for arbitrary code execution.

tenda router buffer-overflow cve-2026-6120 iot
2r 1t 1c
critical advisory

Tenda F451 Router Stack-Based Buffer Overflow Vulnerability

Tenda F451 router version 1.0.0.7 is vulnerable to a stack-based buffer overflow in the frmL7ProtForm function, enabling remote attackers to execute arbitrary code by manipulating the 'page' argument.

cve-2026-6122 buffer-overflow router tenda
2r 1t 1c
critical advisory

Tenda F451 Stack-Based Buffer Overflow Vulnerability (CVE-2026-6121)

A stack-based buffer overflow vulnerability (CVE-2026-6121) exists in the WrlclientSet function of the /goform/WrlclientSet file in the httpd component of Tenda F451 version 1.0.0.7, allowing remote attackers to execute arbitrary code by manipulating the GO argument.

cve-2026-6121 buffer-overflow tenda router
2r 1t 1c
critical threat

Tenda F451 Router Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability in the Tenda F451 router (version 1.0.0.7) allows remote attackers to execute arbitrary code by manipulating the 'page' argument in the fromRouteStatic function of the /goform/RouteStatic file.

exploited tenda router buffer_overflow rce
2r 3t 1c
critical advisory

D-Link DIR-605L Router Buffer Overflow Vulnerability (CVE-2026-5980)

A buffer overflow vulnerability exists in the D-Link DIR-605L router version 2.13B01, allowing a remote attacker to execute arbitrary code by manipulating the `curTime` argument in the `formSetMACFilter` function.

cve buffer_overflow router d-link
2r 4t 1c
critical advisory

D-Link DIR-605L Router Buffer Overflow Vulnerability

A remote buffer overflow vulnerability exists in the D-Link DIR-605L version 2.13B01 due to improper handling of the 'curTime' argument in the '/goform/formVirtualServ' POST request handler, potentially allowing attackers to execute arbitrary code.

dlink router buffer_overflow cve-2026-5979
2r 1t 1c
high advisory

Decolua 9router Authorization Bypass Vulnerability (CVE-2026-5842)

CVE-2026-5842 is an authorization bypass vulnerability in decolua 9router versions up to 0.3.47, allowing remote attackers to gain unauthorized access via manipulation of the /api endpoint.

cve authorization-bypass router
2r 1t 1c
critical advisory

D-Link DIR-882 Remote Command Injection Vulnerability (CVE-2026-5844)

A command injection vulnerability (CVE-2026-5844) exists in the D-Link DIR-882 router version 1.01B02, allowing a remote attacker to execute arbitrary OS commands by manipulating the IPAddress argument in the HNAP1 SetNetworkSettings Handler via the prog.cgi script.

command-injection d-link router cve-2026-5844
2r 1t 1c 1i
critical advisory

Tenda AC15 Router Stack-Based Buffer Overflow (CVE-2026-5830)

A stack-based buffer overflow vulnerability (CVE-2026-5830) in Tenda AC15 firmware version 15.03.05.18 allows remote attackers to execute arbitrary code by manipulating password change parameters, potentially leading to complete device compromise.

cve-2026-5830 tenda router buffer-overflow stack-overflow
2r 2t 1c
high advisory

D-LINK Router M60 and DIR-3040 'Airsnitch' Vulnerability

The 'Airsnitch' vulnerability in D-LINK Router M60 and DIR-3040 allows an attacker from an adjacent network to bypass security measures, disclose confidential information, and manipulate network traffic.

d-link router airsnitch vulnerability network-traffic-manipulation
2r 5t
critical advisory

Tenda CX12L Router Stack-Based Buffer Overflow Vulnerability (CVE-2026-5686)

A stack-based buffer overflow vulnerability (CVE-2026-5686) exists in the Tenda CX12L router version 16.03.53.12, allowing remote attackers to potentially execute arbitrary code by manipulating the 'page' argument in the `/goform/RouteStatic` endpoint.

cve-2026-5686 tenda router stack-based buffer overflow remote code execution
2r 2t 1c
high advisory

Tenda CX12L Router Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability exists in the Tenda CX12L router (version 16.03.53.12) due to improper handling of the 'page' argument in the 'fromwebExcptypemanFilter' function, potentially allowing attackers with local network access to execute arbitrary code.

tenda router buffer-overflow cve-2026-5684
2r 2t 1c
critical advisory

Tenda CH22 Router Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability (CVE-2026-5604) in Tenda CH22 1.0.0.1 allows remote attackers to execute arbitrary code by manipulating the 'standard' argument in the formCertLocalPrecreate function of the /goform/CertLocalPrecreate file within the Parameter Handler component.

cve-2026-5604 buffer-overflow tenda router
2r 1t 1c
critical advisory

Tenda M3 Router Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Tenda M3 1.0.0.10 via manipulation of the policyType argument in the setAdvPolicyData function, allowing remote attackers to execute arbitrary code.

cve-2026-5567 buffer-overflow tenda router webserver
2r 6t 1c
critical advisory

Tenda AC10 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability (CVE-2026-5550) in Tenda AC10 firmware version 16.03.10.10_multi_TDE01 within the /bin/httpd SysToolChangePwd function allows remote attackers to execute arbitrary code.

cve-2026-5550 tenda buffer-overflow router
2r 1t 1c
high advisory

Tenda 4G03 Pro Improper Access Control Vulnerability (CVE-2026-5526)

CVE-2026-5526 describes an improper access control vulnerability in the Tenda 4G03 Pro router's /bin/httpd file, allowing remote attackers to potentially gain unauthorized access.

cve-2026-5526 tenda router access-control
2r 1t 1c
critical advisory

Tenda CH22 Stack-Based Buffer Overflow Vulnerability (CVE-2026-5204)

A stack-based buffer overflow vulnerability (CVE-2026-5204) exists in the Tenda CH22 1.0.0.1 router, allowing remote attackers to execute arbitrary code by manipulating the webSiteId argument in the formWebTypeLibrary function.

cve-2026-5204 tenda buffer-overflow router
2r 1t 1c
critical advisory

Totolink A3300R Command Injection Vulnerability (CVE-2026-5176)

A command injection vulnerability (CVE-2026-5176) exists in the setSyslogCfg function of the Totolink A3300R router version 17.0.0cu.557_b20221024, allowing remote attackers to execute arbitrary commands by manipulating arguments in the /cgi-bin/cstecgi.cgi file.

command-injection cve-2026-5176 totolink router
2r 1t 1c
critical advisory

Tenda CH22 Router Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability exists in Tenda CH22 1.0.0.1 via manipulation of the `mit_linktype` argument in the `/goform/QuickIndex` endpoint, potentially enabling remote code execution.

cve-2026-5156 buffer-overflow tenda router
2r 1t 1c
critical advisory

Tenda CH22 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability exists in Tenda CH22 1.0.0.1/1.If allowing remote attackers to execute arbitrary code by manipulating the `funcname` argument in the `/goform/setcfm` endpoint.

cve-2026-5154 tenda buffer-overflow router
2r 2t 1c
critical advisory

Tenda FH1201 Stack-Based Buffer Overflow Vulnerability (CVE-2026-5046)

A stack-based buffer overflow vulnerability (CVE-2026-5046) in Tenda FH1201 version 1.2.0.14(408) allows remote attackers to execute arbitrary code by manipulating the GO argument in the formWrlExtraSet function of the /goform/WrlExtraSet component.

CVE-2026-5046 tenda buffer-overflow router
2r 1t
critical advisory

Belkin F9K1122 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability (CVE-2026-5044) in Belkin F9K1122 version 1.00.33 allows remote attackers to execute arbitrary code by manipulating the 'webpage' argument in the formSetSystemSettings function, potentially leading to complete system compromise.

cve-2026-5044 buffer-overflow belkin router
2r 1t
critical advisory

Belkin F9K1122 Router Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability (CVE-2026-5042) exists in the Belkin F9K1122 router version 1.00.33, allowing remote attackers to execute arbitrary code by manipulating the webpage argument in the formCrossBandSwitch function.

cve-2026-5042 buffer-overflow router
2r 3t
critical advisory

Tenda 4G06 Router Stack-Based Buffer Overflow Vulnerability (CVE-2026-5036)

A stack-based buffer overflow vulnerability (CVE-2026-5036) exists in the fromDhcpListClient function of the Tenda 4G06 router (version 04.06.01.29), potentially allowing remote attackers to execute arbitrary code by manipulating the 'page' argument in the /goform/DhcpListClient endpoint.

cve-2026-5036 buffer-overflow router tenda
2r 1t
critical advisory

Tenda F453 Stack-Based Buffer Overflow Vulnerability (CVE-2026-5021)

A stack-based buffer overflow vulnerability in Tenda F453 1.0.0.3 allows a remote attacker to execute arbitrary code by manipulating the 'delno' argument in the fromPPTPUserSetting function of the /goform/PPTPUserSetting component's httpd process.

cve-2026-5021 buffer-overflow router
2r 1t
critical advisory

Wavlink WL-WN579X3-C Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability exists in Wavlink WL-WN579X3-C 231124's UPNP Handler component, specifically in the /cgi-bin/firewall.cgi file and the sub_4019FC function, allowing remote attackers to execute arbitrary code by manipulating the UpnpEnabled argument; public exploits are available, but the vendor has not responded to the disclosure.

cve buffer-overflow router
2r 1t
critical advisory

Tenda AC15 Stack-Based Buffer Overflow Vulnerability (CVE-2026-4975)

A stack-based buffer overflow vulnerability (CVE-2026-4975) exists in the Tenda AC15 router version 15.03.05.19, allowing remote attackers to execute arbitrary code by manipulating the 'funcpara1' argument in a POST request to /goform/setcfm.

tenda router buffer overflow cve-2026-4975
2r 1t
critical advisory

Totolink LR350 Remote Buffer Overflow Vulnerability (CVE-2026-4976)

A buffer overflow vulnerability in Totolink LR350 version 9.3.5u.6369_B20220309 allows a remote attacker to execute arbitrary code by manipulating the 'ssid' argument in the setWiFiGuestCfg function.

cve-2026-4976 buffer-overflow totolink router remote-code-execution
2r 1t
critical advisory

Tenda AC7 Stack-Based Buffer Overflow in SetSysTimeCfg

A stack-based buffer overflow vulnerability exists in Tenda AC7 version 15.03.06.44 within the fromSetSysTime function of the /goform/SetSysTimeCfg component's POST Request Handler, allowing a remote attacker to potentially execute arbitrary code by manipulating the 'Time' argument.

cve buffer-overflow router
2r 1t
critical advisory

Tenda AC6 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability in Tenda AC6 version 15.03.05.16 allows remote attackers to execute arbitrary code by manipulating the WANT/WANS argument in the /goform/WizardHandle POST request handler.

cve-2026-4960 buffer-overflow tenda router
2r 1t
critical advisory

Tenda AC5 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability (CVE-2026-4905) exists in Tenda AC5 firmware version 15.03.06.47 allowing remote attackers to execute arbitrary code by manipulating the 'index' argument in a POST request to the /goform/WifiWpsOOB endpoint.

buffer-overflow tenda router cve-2026-4905
2r 1t
critical advisory

Netcore Power 15AX Remote Command Execution Vulnerability

CVE-2026-4840 is a critical command injection vulnerability in the Netcore Power 15AX router that allows remote attackers to execute arbitrary OS commands by manipulating the IpAddr argument in the setTools function of the /bin/netis.cgi file.

command-injection rce vulnerability netcore router
2r 1t
high advisory

D-Link DIR-825/825R OS Command Injection Vulnerability (CVE-2026-4627)

CVE-2026-4627 is an OS command injection vulnerability in the handler_update_system_time function of the libdeuteron_modules.so file in the NTP Service component of D-Link DIR-825 and DIR-825R devices, which can be exploited remotely by authenticated attackers.

command-injection router legacy-device
2r 2t
critical advisory

Tenda F453 Router Stack-Based Buffer Overflow Vulnerability (CVE-2026-4553)

A stack-based buffer overflow vulnerability exists in Tenda F453 version 1.0.0.3 in the fromNatlimit function of the /goform/Natlimit Parameters Handler component, triggered remotely by manipulating the 'page' argument, allowing for potential arbitrary code execution.

cve-2026-4553 tenda buffer-overflow router
2r 5t
critical advisory

Tenda A15 Router Stack-Based Buffer Overflow (CVE-2026-4567)

A stack-based buffer overflow vulnerability (CVE-2026-4567) exists in the UploadCfg function of the /cgi-bin/UploadCfg file in Tenda A15 firmware version 15.13.07.13, allowing remote attackers to execute arbitrary code by manipulating the File argument.

cve-2026-4567 stack-based buffer overflow tenda router remote code execution
2r 1t
critical advisory

Belkin F9K1122 Router Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability exists in Belkin F9K1122 version 1.00.33, allowing remote attackers to execute arbitrary code by manipulating the 'webpage' argument in the 'formWISP5G' function.

cve-2026-4566 buffer-overflow router rce
2r 1t
critical advisory

Tenda AC21 Router Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Tenda AC21 firmware version 16.03.08.16, allowing remote attackers to execute arbitrary code by manipulating arguments to the formSetQosBand function.

tenda ac21 buffer_overflow cve-2026-4565 router
2r 1t
critical advisory

Critical Command Injection Vulnerability in Zyxel Routers (CVE-2026-13942)

A critical command injection vulnerability (CVE-2026-13942) in the UPnP function of Zyxel routers allows remote attackers to execute arbitrary operating system commands by sending crafted UPnP SOAP requests.

zyxel router command injection cve-2026-13942 upnp
2r 1t
critical advisory

Tenda HG3 Router Command Injection Vulnerability (CVE-2026-7096)

A command injection vulnerability (CVE-2026-7096) exists in the Tenda HG3 2.0 300003070 router, allowing remote attackers to execute arbitrary OS commands by manipulating the 'fmgpon_loid' argument in the 'formgponConf' function of the '/boaform/admin/formgponConf' file due to insufficient input validation.

HG3 2.0 300003070 command-injection router tenda
2r 1t 1c
critical advisory

Tenda FH1202 Stack-Based Buffer Overflow Vulnerability (CVE-2026-7034)

A stack-based buffer overflow vulnerability exists in the Tenda FH1202 router, specifically in the WrlExtraSet function, allowing remote attackers to execute arbitrary code by manipulating the 'Go' argument in a request to /goform/WrlExtraSet.

FH1202 1.2.0.14 cve-2026-7034 buffer-overflow router tenda
1r 1t 1c
critical advisory

Tenda F456 Remote Buffer Overflow Vulnerability

A remote buffer overflow vulnerability exists in Tenda F456 version 1.0.0.5 via manipulation of the 'page' argument in the fromDhcpListClient function of the /goform/DhcpListClient component, potentially leading to arbitrary code execution.

F456 cve-2026-7098 buffer-overflow router
2r 1t 1c