CVE-2026-129258

The Tenda AC18 (firmware versions 15.03.05.05_multi/15.03.05.19 Build 6318 ) is vulnerable to an insufficient verification of data authenticity within the Firmware Upgrade Handler component. Specifically, manipulating the upgradeFile argument in the /cgi-bin/upgrade file allows for a remote attac...

EUVD-2026-125935

A vulnerability was identified in Tenda AC18 15.03.05.05multi/15.03.05.19 Build 6318. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/upgrade of the component Firmware Upgrade Handler. Such manipulation of the argument upgradeFile leads to insufficient verification...

CVE-2026-78796

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

CVE-2026-78796

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

CVE-2026-78796

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

CVE-2026-78796

The Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router is vulnerable in versions v1.3.241114.024540 and before . A remote attacker can achieve arbitrary code execution by targeting the www extbackslash extbackslash cgi-bin extbackslash extbackslash upgrade file. The vulnerabili...

EUVD-2026-95858

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

CVE-2026-78796: Improper Neutralization of Special Elements used in an OS Command

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

Netcore B11 security vulnerabilities

Netcore B11 has a security vulnerability, which stems from improper handling of the www\cgi-bin\upgrade file. This could allow remote attackers to execute arbitrary code...

PT-2026-96017

Name of the Vulnerable Software and Affected Versions Netcore NBR200V2 version 1.3.241127.071246 Description Command injection is possible via remote manipulation of the QUERY STRING argument within the Firmware Upgrade CGI Endpoint. This issue occurs in the /www/cgi-bin/upgrade endpoint...