CVE-2026-1156: Buffer Copy without Checking Size of Input

A vulnerability was determined in Totolink LR350 9.3.5u.6369B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-1155: Buffer Copy without Checking Size of Input

A vulnerability was found in Totolink LR350 9.3.5u.6369B20220309. Affected by this vulnerability is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid results in buffer overflow. The attack may be performed from remote. The exploit has been ma...

TOTOLINK LR350 security vulnerabilities

TOTOLINK LR350 is a wireless router produced by TOTOLINK Corporation. The TOTOLINK LR350 9.3.5u.6369B20220309 version contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter “ssid” in the file /cgi-bin/cstecgi.cgi, which may lead to a buffer overflow...

TOTOLINK A3700R security vulnerabilities

TOTOLINK A3700R is a wireless router produced by TOTOLINK Corporation. The TOTOLINK A3700R version 9.1.2u.5822B20200513 contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter “ssid” in the function setWiFiEasyGuestCfg within the file...

TOTOLINK LR350 security vulnerabilities

TOTOLINK LR350 is a wireless router produced by TOTOLINK Corporation. The TOTOLINK LR350 9.3.5u.6369B20220309 version contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter “ssid” in the file /cgi-bin/cstecgi.cgi, which may lead to a buffer overflow...

The vulnerability of the strcpy() function in the microprogramming software for UTT 520W routers allows a hacker to cause a service failure.

The vulnerability of the strcpy function in the UTT 520W router software lies in the fact that the operation’s output goes beyond the buffer boundaries during the processing of the ssid parameter. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the strcpy() function in the microprogrammed software for UTT 520W routers allows a hacker to cause a service failure.

The vulnerability of the strcpy function in the UTT 520W router software lies in the fact that the operation’s output goes beyond the buffer boundaries during the processing of the ssid parameter. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2025-65349

A Stored Cross-Site Scripting XSS vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000897)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000897 advisory. Stack-based buffer overflow in the brcmfcfg80211startap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003115 advisory. Stack-based buffer overflow in the brcmfcfg80211startap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allo...

CVE-2025-65349

A Stored Cross-Site Scripting XSS vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at...

CVE-2025-65349

A Stored Cross-Site Scripting XSS vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at...

CVE-2025-65349: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at...

CVE-2025-65349

The Each Italy Wireless Mini Router WIRELESS-N 300M (version v28K.MiniRouter.20190211 ) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in its web management interface. The root cause is the lack of input sanitization for the repeater AP SSID value. Attackers can exploit this b...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003330 advisory. Stack-based buffer overflow in the brcmfcfg80211startap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allo...

Each Italy Wireless Mini Router WIRELESS-N 300M has security vulnerabilities

The Each Italy Wireless Mini Router WIRELESS-N 300M is a wireless router produced by Each Italy. There is a security vulnerability in the version v28K.MiniRouter.20190211 of the Each Italy Wireless Mini Router WIRELESS-N 300M. This vulnerability stems from the lack of cleaning of the repeater AP...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001349)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001349 advisory. rtwwxsetscan in drivers/staging/rtl8188eu/osdep/ioctllinux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the -ssid array. NOTE: from the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001427)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001427 advisory. mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code vi...

CVE-2026-0836

A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formConfigFastDirectionW. This manipulation of the argument ssid causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclos...

CVE-2026-0838

A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy of the file /goform/ConfigWirelessBase. Performing a manipulation of the argument ssid results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to...