CVE-2025-56311

CVE-2025-56311: Security Advisory – CSRF Vulnerability in FD602GW-DX-R410 Router Reboot Function Proof of Concept and Security Advisory for a Cross-Site Request Forgery CSRF vulnerability in the FD602GW-DX-R410 fiber router’s admin interface Firmware V2.2.14. The advisory outlines the impact,...

CVE-2025-34152

⚠️ CVE-2025-34152 – Shenzhen Aitemi M300 Wi-Fi Repeater RCE 🚨 Overview Shenzhen Aitemi M300 Wi-Fi Repeater is affected by an unauthenticated remote code execution RCE. No login required Does not reboot the device Can be exploited remotely 🛠 Vulnerable Versions Version| Status ---|--- 1.0.x| ❌...

PT-2026-92022

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

CVE-2026-51767

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset pairing state and reboot the device via sending a crafted MQTT message to the csbroker component...

CVE-2026-51767

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset pairing state and reboot the device via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69204

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reboot the system via sending a crafted MQTT message to the csbroker component...

CVE-2026-51767

The TOTOLINK T6 (firmware version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw within the recvClearPairCfg function. This vulnerability allows unauthenticated attackers to reset the pairing state and reboot the device by sending a crafted MQTT message to the cs_broker...

CVE-2026-51767

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset pairing state and reboot the device via sending a crafted MQTT message to the csbroker component...

CVE-2026-51738

Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset the device configuration and reboot the device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51738

The TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw in the LoadDefSettings function. This allows unauthenticated attackers to reset the device configuration and trigger a reboot by sending a crafted POST request to the /cgi-bin/cstecgi....

EUVD-2026-68743

Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset the device configuration and reboot the device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-77977

Ebyte NE2-D11 is an industrial gateway whose vendor configuration utility lacks authentication before permitting disruptive administrative actions (reboot or factory reset) when default credentials remain configured. An unauthenticated attacker on the adjacent network can trigger these actions, c...

CVE-2026-77977 Ebyte NA111-M Missing Authentication for Critical Function

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

CVE-2026-75618

Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker on the local network can send specially crafted requests that cause the service to dereference an invalid pointer, resulting in a service crash and device reboot. Successful exploitation can disru...

CVE-2026-75618

TP-Link Tapo C100/C101 V5 contains a null pointer dereference in its RTSP service . An attacker on the adjacent (local) network can send specially crafted requests to trigger the invalid pointer dereference, causing a service crash and device reboot . The impact is a temporary denial-of-service ,...

CVE-2025-41769

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code...

CVE-2025-41769 Unauthenticated Buffer Overflow in PROFINET Service

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code...

CVE-2025-41769

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code...

CVE-2025-41769

CVE-2025-41769 describes a buffer overflow in the PROFINET service of a device, exploitable by an unauthenticated remote attacker under default configuration. Consequences listed include device reboot or arbitrary code execution. Documented details indicate network-based access with low attack co...

PT-2026-71036

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The PROFINET service is affected by a buffer overflow, which occurs when a program writes more data to a block of memory than it can hold. This issue exists in t...