CVE-2026-18754

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

CVE-2018-18754

ZyXEL VMG3312-B10B 1.00AAPP.7 devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file...

CVE-2020-18754

The CVE-2020-18754 entry concerns Dut Computer Control Engineering Co.’s PLC MAC1100. Connected sources confirm an information disclosure vulnerability in the MAC1100 PLC, enabling remote access to control code or sensitive information. CNVD/CNNVD describe the impact as the ability for an attacke...

CVE-2017-18754

creationtimestamp| type| source ---|---|--- 2020-04-22 21:37:14+00:00| seen| https://t.me/cibsecurity/11544...

CVE-2017-18754

The CVE-2017-18754 entry concerns NETGEAR routers: WNDR3700v4 (before 1.0.2.88), WNDR4300v1 (before 1.0.2.90), and WNR2000v5 (before 1.0.0.58). The issue is authenticated user–driven command injection. No further technical specifics (root cause details, affected components, or remediation) are pr...

CVE-2019-18754

CVE-2019-18754 is rejected and not used, per the Initial Description.

CVE-2019-18754

...

CVE-2018-18754

CVE-2018-18754 affects ZyXEL VMG3312-B10B gateways (1.00(AAPP.7)) with a backdoor root account whose password hash tTn3+Z@!Sr0O+ is stored in etc/default.cfg. Multiple connected sources corroborate a backdoor/root access issue, enabling potentially unauthorized full control. NVD metrics show a hi...