CVE-2026-129258

The Tenda AC18 (firmware versions 15.03.05.05_multi/15.03.05.19 Build 6318 ) is vulnerable to an insufficient verification of data authenticity within the Firmware Upgrade Handler component. Specifically, manipulating the upgradeFile argument in the /cgi-bin/upgrade file allows for a remote attac...

EUVD-2026-125935

A vulnerability was identified in Tenda AC18 15.03.05.05multi/15.03.05.19 Build 6318. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/upgrade of the component Firmware Upgrade Handler. Such manipulation of the argument upgradeFile leads to insufficient verification...

CVE-2026-12187

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality of the file /usr/bin/oneclickupgrade of the component Online Firmware Upgrade Handler. Such manipulation leads to command injection. The attack can be launched...

CVE-2026-12187: Improper Neutralization of Special Elements used in a Command

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality of the file /usr/bin/oneclickupgrade of the component Online Firmware Upgrade Handler. Such manipulation leads to command injection. The attack can be launched...