CVE-2026-36956

CVE-2026-36956: تزوير الطلبات عبر المواقع CSRF في واجهة الإدارة عبر الويب معرف CVE: CVE-2026-36956 التاريخ: 2026-04-29 المكتشف: Kirubel Solomne البائع: Shenzhen Dibit Network Equipment Co., Ltd. المنتج: Dbit Router إصدار البرنامج الثابت: V1.0.0 CWE: CWE-352 - تزوير الطلبات عبر المواقع CSRF الوصف ...

CVE-2026-36957

CVE-2026-36957: رفض الخدمة عبر فيضان HTTP على خادم الويب Boa معرف CVE: CVE-2026-36957 التاريخ: 2026-04-29 المكتشف: Kirubel Solomne البائع: شركة Shenzhen Dibit Network Equipment Co., Ltd. المنتج: راوتر Dbit إصدار البرنامج الثابت: V1.0.0 CWE: CWE-400 - استهلاك غير متحكم فيه للموارد الوصف البرنامج...

Dbit N300 T1 Pro 资源管理错误漏洞

The Dbit N300 T1 Pro is a wireless router device produced by the Dbit company. The Dbit N300 T1 Pro V1.0.0 version has a resource management vulnerability. This vulnerability stems from a denial-of-service attack in the boa Web server URI handler, which could allow attackers to exhaust system...

CVE-2026-36956

The affected component is the web management interface of the Dbit N300 T1 Pro wireless router (V1.0.0). The issue is a CSRF vulnerability due to missing anti-CSRF tokens and insufficient Origin/Referer validation on administrative endpoints such as /api/setWlan. If an authenticated administrator...

CVE-2026-36957

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent URIs, an attacker can exhaust critical system resources, including file descriptors and memory...

EUVD-2026-26377

A Cross-Site Request Forgery CSRF vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanisms such as anti-CSRF tokens or strict Origin/Referer validation for administrative API endpoints. An...

CVE-2026-36956

A Cross-Site Request Forgery CSRF vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanisms such as anti-CSRF tokens or strict Origin/Referer validation for administrative API endpoints. An...

Exploit for CVE-2026-36957

CVE-2026-36957: Denial of Service via HTTP Flood on Boa Web Se...

CVE-2025-65427

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations...

PT-2025-51736

Name of the Vulnerable Software and Affected Versions Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router version V1.0.0 Description The Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router version V1.0.0 does not implement rate limiting on the /api/login endpoint. This allows attackers to attempt...