CVE-2026-40891 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

CVE-2024-40891

UNSUPPORTED WHEN ASSIGNED A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00AAFR.4C020170615 could allow an authenticated attacker to execute operating system OS commands on an affected device via Telnet...

CVE-2024-40891

UNSUPPORTED WHEN ASSIGNED A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00AAFR.4C020170615 could allow an authenticated attacker to execute operating system OS commands on an affected device via Telnet...

CVE-2024-40891

UNSUPPORTED WHEN ASSIGNED A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00AAFR.4C020170615 could allow an authenticated attacker to execute operating system OS commands on an affected device via Telnet...

Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability

Cybersecurity researchers are warning that a critical zero-day vulnerability impacting Zyxel CPE Series devices is seeing active exploitation attempts in the wild. "Attackers can leverage this vulnerability to execute arbitrary commands on affected devices, leading to complete system compromise,...

CVE-2024-40891

creationtimestamp| type| source ---|---|--- 2025-01-28 21:13:33+00:00| seen| https://bsky.app/profile/greynoise.bsky.social/post/3lgtep3hmh22o 2025-01-28 21:19:14+00:00| seen| https://infosec.exchange/users/iagox86/statuses/113908066147897929 2025-01-28 21:28:59+00:00| seen|...

CVE-2023-40891

creationtimestamp| type| source ---|---|--- 2023-08-24 22:13:45+00:00| seen| https://t.me/cibsecurity/69147...

CVE-2023-40891

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg...

CVE-2023-40891

CVE-2023-40891 pertains to Tenda AC8 v4 (US_AC8V4.0si_V16.03.34.06_cn) and is caused by a stack overflow in the /goform/SetFirewallCfg endpoint via the firewallEn parameter. The NVD entry lists a critical CVSS v3.1 score of 9.8 (Impact: Confidentiality/Integrity/Availability all HIGH; Vector: NET...