CVE-2026-9395

A vulnerability was identified in Besen BS20 EV Charging Station up to 20260426. Affected is an unknown function of the component BLE/UDP. The manipulation leads to insufficiently protected credentials. The attack needs to be initiated within the local network. The original disclosure mentions,...

CVE-2026-9534

A flaw has been found in Totolink CA750-PoE 6.2c.510. This affects the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a manipulation of the argument PIN can lead to os command injection. It is possible to launch the attack remotely. The...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32385)

TOTOLINK A8000RU is a wireless router produced by TOTOLINK, a company from China. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setParentalRules function in the Web management interface’s /cgi-bin/cstecgi.cgi file, which...

📄 ZTE ZXHN H298A / H108N Credential Disclosure

A single unauthenticated HTTP GET to /getpage.lua?pid=1000&ETHCheat=1 on ZTE H298A or H108N routers returns the live administrator password OBJUSERINFOIDPassword1, WLAN PSK WLANPSKKeyPassphrase1, and SSID in plaintext HTML. A second endpoint exposes the device serial number. -----BEGIN SECURITY...

The vulnerability of the formWlanMP() function in the /goform/formWlanMP file of the webs component of the microprogramming software for wireless signal amplifiers from Edimax EW-7438RPn allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWlanMP function in the /goform/formWlanMP file of the webs component of the microprogramming software for wireless signal amplifiers from Edimax EW-7438RPn is related to the output of operations that go beyond the buffer in memory when processing parameters such as...

CVE-2026-9274

This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing the UART interface and performing memory extraction to obtain sensitive information, including...

The vulnerability of the formWizSurvey function in the /goform/formWizSurvey microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn allows a intruder to execute arbitrary code or trigger a service failure.

The vulnerability of the formWizSurvey function in the /goform/formWizSurvey microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...

The vulnerability of the formWirelessTbl function in the goform/formWirelessTbl file of the webs component of the Edimax EW-7438RPn wireless signal amplifiers’ software allows a hacker to trigger a service failure.

The vulnerability of the formWirelessTbbl function in the goform/formWirelessTbl file of the webs component of the microprogramming software for wireless signal amplifiers from Edimax EW-7438RPn is related to the execution of operations outside the buffer in memory when processing the submit-url...

Edimax EW-7438RPn 安全漏洞

The Edimax EW-7438RPn is a wireless signal extender from Taiwan, China-based Xunzhou Edimax Corporation. A security vulnerability exists in the Edimax EW-7438RPn version 1.31, which originates from the parameter submit-url operation of the function formLicence in the file /goform/formLicence, and...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32564)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setUpgradeFW function in the /cgi-bin/cstecgi.cgi file, which fails to properly handle the resetFla...

Edimax EW-7438RPn 安全漏洞

Edimax EW-7438RPn is a wireless signal extender from Taiwan, China-based Edimax. A security vulnerability exists in the Edimax EW-7438RPn version 1.31, which originates from the parameter submit-url operation of the function formWpsProxyEnable in the file /goform/formWpsProxyEnable, and may resul...

CP Plus Wi-Fi Camera 安全漏洞

CP Plus Wi-Fi Camera is a wireless security camera from CP Plus. A security vulnerability exists in the CP Plus Wi-Fi Camera that stems from improper protection of sensitive information in runtime memory, which could allow an attacker with physical access to obtain sensitive information including...

The vulnerability of the formwlencrypt24g function in the goform/formwlencrypt24g file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers of the Edimax EW-7438RPn Mini device, which allows a hacker to cause a service failure.

The vulnerability of the formwlencrypt24g function in the goform/formwlencrypt24g file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn Mini is related to the execution of an operation outside the buffer in memory when...

The vulnerability of the formWanTcpipSetup function in the goform/formWanTcpipSetup file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax BR-6428NS, which allows a hacker to cause a service failure.

The vulnerability of the formWanTcpipSetup function in the goform/formWanTcpipSetup file of the POST Request Handler component of the wireless signal amplifiers’ microprogramming system, Edimax BR-6428NS, is related to the issue where the operation output goes beyond the buffer in memory when...

CVE-2026-9398

The CVE-2026-9398 entry concerns Besen BS20 EV Charging Station with a flaw in the BLE/WiFi authentication that enables bypass via capture-replay. Affected component: BLE/WiFi, within the Besen BS20 line up to 20260426. The attack must originate from the local network; exploitation is described a...

CVE-2026-9362

A security vulnerability has been detected in Edimax EW-7438RPn 1.12. This vulnerability affects the function formConnectionSetting of the file /goform/formConnectionSetting of the component Setting Handler. Such manipulation of the argument maxConn/timeOut leads to command injection. The attack...

EUVD-2026-31559

A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/formWirelessTbl of the component webs. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has bee...

CVE-2026-9346 Edimax EW-7438RPn webs formWirelessTbl buffer overflow

A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/formWirelessTbl of the component webs. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has bee...

Besen BS20 EV Charging Station 安全漏洞

The Besen BS20 EV Charging Station is an AC electric vehicle wall-mounted charging station developed by the Chinese company Besen. The Besen BS20 EV Charging Station, including versions dated before April 2026, has a security vulnerability. This vulnerability stems from improper operation of...

Edimax EW-7438RPn 安全漏洞

The Edimax EW-7438RPn is a wireless signal extender produced by Edimax of Taiwan, China. Versions of Edimax EW-7438RPn prior to 1.31 contained a security vulnerability. This vulnerability stemmed from unknown functions in the webs component files and/goform/formWpsStart, which operated on...