CVE-2026-41927

🗓️ 04 May 2026 19:20:59Reported by VulnCheckType

Unauthenticated attackers exploit a stack overflow in firewall.cgi and makeRequest.cgi on the WDR201A extender via Content-Length overflow to execute code.

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2026-41927	4 May 202619:20	–	attackerkb
Circl	CVE-2026-41927	4 May 202622:39	–	circl
CNNVD	Yeapook WDR201A WiFi Extender 安全漏洞	4 May 202600:00	–	cnnvd
Cvelist	CVE-2026-41927 WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgi	4 May 202619:20	–	cvelist
EUVD	EUVD-2026-27127	4 May 202619:20	–	euvd
NVD	CVE-2026-41927	4 May 202620:16	–	nvd
Positive Technologies	PT-2026-36918	4 May 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-41927: Stack-based Buffer Overflow	4 May 202600:00	–	rapid7
RedhatCVE	CVE-2026-41927	5 May 202620:21	–	redhatcve
Vulnrichment	CVE-2026-41927 WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgi	4 May 202619:20	–	vulnrichment

Vulners

Node

shenzhen_yipu_commercial_and_trading_co.,_ltd wdr201a_wifi_extenderRange0–1.02.0

[
  {
    "vendor": "Shenzhen Yipu Commercial and Trading Co., Ltd",
    "product": "WDR201A WiFi Extender",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "1.02.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/wdr201a-wifi-extender-stack-based-buffer-overflow-via-firewall-cgi
made-in-china	www.made-in-china.com/showroom/yeapook/
mstreet97	www.mstreet97.github.io/security-research/iot/vulnerability-disclosure/ai-assisted-research/cybersecurity/cve/2026/05/04/Teaching_the_Machine_Where_to_Look.html

17 Jun 2026 10:47Current

6.6Medium risk

Vulners AI Score6.6

CVSS 48.3

EPSS0.00573

SSVC

CWE-121