Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/04/29 6:18 a.m.1 views

CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

6.8CVSS5.5AI score0.00278EPSS
Exploits0References1
NVD
NVD
added 2026/04/28 3:16 a.m.1 views

CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

6.8CVSS0.00278EPSS
Exploits0References1
CVE
CVE
added 2026/04/28 1:57 a.m.6 views

CVE-2026-0711

The CVE-2026-0711 issue affects Zyxel DX3300-T0 devices with firmware up to 5.50(ABVY.7.1)C0, where a post-authentication command injection exists in the EasyMesh-related APIs. An authenticated, adjacent attacker with administrator privileges can execute OS commands on the device, enabling high i...

6.8CVSS5.5AI score0.00278EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/28 1:57 a.m.1 views

CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

6.8CVSS5.5AI score0.00278EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/04/28 1:57 a.m.2 views

EUVD-2026-25968

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

6.8CVSS5.4AI score0.00278EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/28 1:57 a.m.1 views

CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

6.8CVSS5.4AI score0.00278EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/28 1:57 a.m.27 views

CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

6.8CVSS0.00278EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.2 views

PT-2026-35645

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

6.8CVSS5.5AI score0.00278EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.4 views

Zyxel DX3300-T0 操作系统命令注入漏洞

The Zyxel DX3300-T0 is a small wireless WiFi router produced by the Chinese company Zyxel. Versions of the Zyxel DX3300-T0 prior to 5.50ABVY.7.1C0 contained an operating system command injection vulnerability. This vulnerability stemmed from a command injection flaw in the APIs related to EasyMes...

6.8CVSS5.9AI score0.00278EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/01 12:0 a.m.3 views

CVE-2025-61045

TOTOLINK X18 V9.1.0cu.2053B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function...

0.0361EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2021/05/04 12:0 a.m.250 views

Shenzhen Skyworth RN510 Information Disclosure

Overview ======== Title:- UnAuthenticated Sensitive information Discloser in RN510 Mesh Extender. CVE-ID :- CVE-2021-25326 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested...

3.5CVSS5.6AI score0.00164EPSS
Exploits3
0day.today
0day.today
added 2021/05/02 12:0 a.m.70 views

Shenzhen Skyworth RN510 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

Overview ======== Title:- Authenticated XSRF in RN510 Mesh Extender. CVE-ID :- CVE-2021-25327 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested and verified Potential 2.RN62...

6.5CVSS0.3AI score0.00304EPSS
Exploits3
Rows per page
Query Builder