CVE-2026-96892

A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2026-96892

A flaw in the Edimax BR-6428nC firmware (version 1.16 ) allows for an open redirect vulnerability. The issue resides in the websRedirect function of the goform Handler component, where manipulating the submit-url argument enables remote execution of the redirect. Multiple endpoints are affected b...

CVE-2026-96892 Edimax BR-6428nC goform websRedirect redirect

A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used...

EUVD-2026-85783

A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used...

The vulnerability of the Parameter Handler component in the fromAdvSetWan function of the /goform/AdvSetWan microprogramming system Tenda CH22, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Parameter Handler component in the fromAdvSetWan function of the /goform/AdvSetWan microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling, which allows attackers to carry out spoofing attacks.

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by sending specially crafted GET requests to the final destination /goform/AdvSetD...

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 software allows a perpetrator to execute arbitrary commands.

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the mac parameter. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the Parameter Handler component in the fromSetCfm function of the /goform/setcfm microprogramming system Tenda CH22, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Parameter Handler component in the fromSetCfm function of the /goform/setcfm microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the sub_423B50() function (/goform/setMacFilterCfg) of the MAC Filtering Configuration Endpoint component in the Tenda A18 router microprogramming software allows a intruder to cause a service failure.

The vulnerability of the sub423B50 function /goform/setMacFilterCfg of the MAC Filtering Configuration Endpoint component in the Tenda A18 microprogramming router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure ...

The vulnerability of the fromRouteStatic() function (/goform/RouteStatic) in the Tenda F456 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromRouteStatic function /goform/RouteStatic of the Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by...

VulnCheck KEV: CVE-2026-78141

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

VulnCheck KEV: CVE-2026-5153

A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used...

EUVD-2026-60004

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2026-19962

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

CVE-2026-19963

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2026-19963 Edimax EW-7478APC stainfo command injection

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2026-19963 Edimax EW-7478APC stainfo command injection

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2026-19963

The CVE-2026-19963 affects Edimax EW-7478APC 1.04. The vulnerability is in the stainfo function of /goform/stainfo, where manipulation of the interface argument leads to a remote command injection. Public exploit availability and disclosure indicate potential active abuse; the vendor was contacte...

CVE-2026-19960

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...