ROOT-OS-DEBIAN-13-CVE-2025-12781 CVE-2025-12781 in python3.13 - Patched by Root

Root has patched CVE-2025-12781 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-11972 CVE-2026-11972 in python3.13 - Patched by Root

Root has patched CVE-2026-11972 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-15308 CVE-2026-15308 in python3.13 - Patched by Root

Root has patched CVE-2026-15308 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-7210 CVE-2026-7210 in python3.13 - Patched by Root

Root has patched CVE-2026-7210 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-0864 CVE-2026-0864 in python3.13 - Patched by Root

Root has patched CVE-2026-0864 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-16348

TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...

EUVD-2026-65007

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-9254

An unauthenticated OS command injection vulnerability exists in the parental control functionality of TP-Link Archer BE800 V1, BE3600 V1, and AX75 V1 routers, caused by improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker with no prior access can...

CVE-2026-9254 Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...

EUVD-2026-65006

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...

CVE-2026-71943

DrayTek VigorSwitch multiple models are affected by an OS command injection vulnerability in the setDevNet function. The root cause is insufficient filtering of the username and password fields before they are passed to command execution. A remote attacker with valid administrative credentials fo...

EUVD-2026-65002

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

EUVD-2026-64990

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftpupgrade function. The vulnerability is caused by insufficient filtering before the filename field is concatenated into a command. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2026-71931

Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the tftp_upgrade function. The root cause is insufficient filtering of the filename field before it is concatenated into a system command, allowing a remote attacker to execute arbitrary commands with roo...

CVE-2026-71929

Multiple DrayTek VigorSwitch models contain an OS command injection vulnerability in the setDevProto function, caused by insufficient filtering of the username and password fields before command execution. A remote attacker with valid administrative credentials for the device's web management int...

EUVD-2026-64989

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2026-71930

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function, caused by insufficient filtering of username and password fields before command execution. A remote attacker with valid administrative credentials on the device's web management interface can cr...

CVE-2026-71929 DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProto

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to...

EUVD-2026-64988

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to...