Azure Linux 3.0 Security Update: kernel (CVE-2024-46672)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46672 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID...

CVE-2026-1328: Buffer Copy without Checking Size of Input

A vulnerability was detected in Totolink NR1800X 9.1.0u.6279B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack may be initiated remotely. The...

CVE-2025-70651

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70651

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

EUVD-2026-3654

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda AX1803 security vulnerabilities

The Tenda AX1803 is a dual-band Gigabit WIFI6 router produced by the Chinese company Tenda. The Tenda AX1803 v1.0.0.1 version contains a security vulnerability. This vulnerability stems from a stack overflow in the ssid parameter within the formfastsettingwifiset function, which may lead to...

CVE-2025-70651

The Tenda AX-1803 router, specifically version 1.0.0.1 , contains a stack-based buffer overflow vulnerability within the form_fast_setting_wifi_set() function. The flaw is triggered by the ssid parameter, which allows a remote attacker to cause a Denial of Service (DoS) through a crafted request....

CVE-2025-70651: Stack-based Buffer Overflow

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70651

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70651

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70651

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2026-1157

A vulnerability was identified in Totolink LR350 9.3.5u.6369B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and...

The vulnerability of the setWiFiEasyGuestCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK LR350 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the setWiFiEasyGuestCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK LR350 router’s microprogramming system is related to the issue of data leaving the buffer and being stored in memory when processing the ssid parameter. Exploiting this vulnerability could allo...

The vulnerability of the setWiFiEasyCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK LR350 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the setWiFiEasyCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK LR350 router’s microprogramming system is related to the issue of data being written outside the buffer in memory when processing the ssid parameter. Exploiting this vulnerability could allow an...

The vulnerability of the setWiFiEasyGuestCfg() function in TOTOLINK A3700R router software allows a hacker to trigger a service failure.

The vulnerability of the setWiFiEasyGuestCfg function in TOTOLINK A3700R router microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the ssid parameter. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the setWizardCfg() function in the TOTOLINK LR350 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the setWizardCfg function in TOTOLINK LR350 router microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the parameter ssid. Exploiting this vulnerability allows an attacker to cause a service failure by...

CVE-2026-1158

A security flaw has been discovered in Totolink LR350 9.3.5u.6369B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be...

CVE-2026-1158 Totolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow

A security flaw has been discovered in Totolink LR350 9.3.5u.6369B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be...

CVE-2026-1158 Totolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow

A security flaw has been discovered in Totolink LR350 9.3.5u.6369B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be...

CVE-2026-1158

Totolink LR350 9.3.5u.6369_B20220309 is affected by CVE-2026-1158 due to a buffer overflow in the POST Request Handler’s setWizardCfg function (file /cgi-bin/cstecgi.cgi) when manipulating the ssid argument. The vulnerability can be triggered remotely, and public exploits exist. APT-like exposure...