ZeroShell <= 1.0beta11 Remote Code Execution

ZeroShell 1.0beta11 and earlier via cgi-bin/kerbynet allows remote attackers to execute arbitrary commands through shell metacharacters in the type parameter in a NoAuthREQ x509List action. id: CVE-2009-0545 info: name: ZeroShell = 1.0beta11 Remote Code Execution author: geeknik severity: critica...

CVE-2026-121618

A weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of the file /cgi-bin/fqc.cgi of the component Factory Quality Control. This manipulation causes information disclosure. Remote exploitation of the attack is possible. The exploit has been made available to the...

CVE-2026-121617

A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function initmultipart of the file /cgi-bin/uploadfw.cgi of the component Header Parser. The manipulation results in out-of-bounds write. The attack may be launched remotely. The exploit has been released...

CVE-2026-121616

A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the function strcpy of the file /cgi-bin/meshlogin.cgi of the component JSON Request Parser. The manipulation of the argument username/password/token/source/cn/action leads to out-of-bounds write. The atta...

CVE-2026-121615

A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function of the file /cgi-bin/meshlogin.cgi of the component Login Handler. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been publicly disclosed a...

CVE-2026-121618

A weakness in the Factory Quality Control component of Linksys E5600 version 1.1.0.26 affects the /cgi-bin/fqc.cgi file. This vulnerability allows for information disclosure via remote exploitation. The exploit is publicly available and could be used in attacks; however, it only affects products ...

CVE-2026-121617

A security flaw exists in the Linksys E5600 (version 1.1.0.26 ) within the Header Parser component. Specifically, the init_multipart function in the /cgi-bin/upload_fw.cgi file is susceptible to an out-of-bounds write via manipulation. This vulnerability can be exploited remotely to potentially i...

CVE-2026-121616

A vulnerability exists in the Linksys E5600 (version 1.1.0.26) within the JSON Request Parser component. The root cause is the use of the strcpy function in the /cgi-bin/mesh_login.cgi file, which allows an out-of-bounds write when an attacker manipulates the username, password, token, source, cn...

CVE-2026-121615

A vulnerability exists in the Login Handler component of Linksys E5600 firmware version 1.1.0.26 . The flaw is located within an unknown function of the /cgi-bin/mesh_login.cgi file. By executing a manipulation, a remote attacker can achieve improper authentication . While the exploit has been pu...

CVE-2026-121600

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be...

CVE-2026-121599

A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/wepkey3 results in stack-based buffer...

CVE-2026-121598

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

CVE-2026-121600

A stack-based buffer overflow vulnerability exists in the MAC Filter Handler component of TOTOLINK A950RG (version 4.1.2cu.5268_B20221104). The flaw is located in the setMacFilterRules function of the /cgi-bin/cstecgi.cgi file, specifically triggered by the manipulation of the addEffect argument....

CVE-2026-121599

The TOTOLINK A950RG (firmware version 4.1.2cu.5268_B20221104 ) is vulnerable to a stack-based buffer overflow in the Multi-SSID Configuration component. The flaw exists within the setWiFiMultipleConfig/delWiFiMultipleConfig functions located in the /cgi-bin/cstecgi.cgi file. An attacker can trigg...

CVE-2026-121597

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The...

CVE-2026-121598

A stack-based buffer overflow vulnerability exists in the Basic Wireless Configuration Handler component of TOTOLINK A950RG version 4.1.2cu.5268_B20221104 . The flaw is located in the strcpy function of the /cgi-bin/cstecgi.cgi file, where improper handling of the wepkey argument allows for remot...

EUVD-2026-116667

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

CVE-2026-121597

The TOTOLINK A950RG (firmware version 4.1.2cu.5268_B20221104 ) is vulnerable to a stack-based buffer overflow within the Easy Setup Wizard Handler component. The flaw exists in the setAppEasyWizardConfig function of the /cgi-bin/cstecgi.cgi file, where manipulating the functionType argument can t...

CVE-2026-120283

A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hiddentimezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was contacted early about this...

CVE-2026-120283 Linksys E8450 portal.cgi strcpy stack-based overflow

A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hiddentimezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was contacted early about this...