PT-2026-54758

An unauthenticated command injection vulnerability in the /goform/fast setting internet set endpoint of Tenda AC18 v15.03.05.05 allows attackers to execute arbitrary commands via a crafted payload injected into the mac parameter...

The vulnerability of the final point /goform/getHomePageInfo of the microprogramming software for the Pix-Link LV-WR21Q router, which allows a hacker to trigger a service failure.

The vulnerability of the final point /goform/getHomePageInfo of the Pix-Link LV-WR21Q router’s microprogramming system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-13582

A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This manipulation of the argument UserName/Password causes buffer overflow. The attack is possible to be carried out remotely...

CVE-2026-13581

A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. The manipulation of the argument rootAPmac results in os command injection. The attack can be executed remotel...

CVE-2026-13560

A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipulation of the argument submit-url leads to os command injection. The attack is possible to be carri...

CVE-2026-13560 Edimax EW-7478APC POST Request formAccept os command injection

A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipulation of the argument submit-url leads to os command injection. The attack is possible to be carri...

CVE-2026-13519

A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could ...

EUVD-2026-40016

A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could ...

CVE-2026-13518

A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the publ...

CVE-2026-13517

The CVE-2026-13517 entry describes a stack-based overflow in Tenda JD12L’s /goform/WifiBasicSet function (parameter security_5g) impacting firmware 16.03.53.23. The root cause is a stack-based buffer overflow caused by manipulation of security_5g, allowing remote execution. Exploitation is report...

PT-2026-53174

Name of the Vulnerable Software and Affected Versions Tenda JD12L version 16.03.53.23 Description A stack-based buffer overflow occurs in the fromAddressNat function within the /goform/addressNat file. This issue is triggered by the manipulation of the page argument, allowing for remote...

CVE-2026-13516

A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of the argument shareSpeed results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is n...

CVE-2026-13515

A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclos...

The vulnerability of the strcpy() function (/goform/formConfigDnsFilterGlobal) in the UTT HiPER 810G router software allows a attacker to cause a service failure.

The vulnerability of the strcpy function /goform/formConfigDnsFilterGlobal in the UTT HiPER 810G router software lies in the possibility of the operation being executed outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the strcpy() function (/goform/getOneApConfTempEntry) in the UTT HiPER 810G router software allows a attacker to cause a service failure.

The vulnerability of the strcpy function /goform/getOneApConfTempEntry in the UTT HiPER 810G router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the strcpy() function (/goform/formApMail) in the microprogrammed routing software UTT HiPER 810G allows a hacker to cause a service failure.

The vulnerability of the strcpy function /goform/formApMail in the UTT HiPER 810G router software lies in the fact that the operation’s results are stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the strcpy() function (/goform/formRemoteControl) in the microprogrammed software for UTT HiPER 810G allows a hacker to cause a service failure.

The vulnerability of the strcpy function /goform/formRemoteControl in the UTT HiPER 810G router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the strcpy() function (/goform/setSysAdm) in the UTT HiPER 810G router software allows a attacker to cause a service failure.

The vulnerability of the strcpy function /goform/setSysAdm in the UTT HiPER 810G router software is related to the operation of writing data beyond the buffer boundaries when processing the passwd1 parameter. Exploiting this vulnerability could allow an attacker to cause a service failure remotel...

The vulnerability of the formexeCommand()/goform/exeCommand function in the Tenda i3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formexeCommand/goform/exeCommand function in the Tenda i3 wireless access point software is related to the operation that goes beyond the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

EUVD-2026-38196

A security flaw has been discovered in Edimax BR-6478AC V2 1.23. Affected by this vulnerability is the function mp of the file /goform/mp of the component POST Request Handler. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. Th...