PT-2026-77468

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description A flaw in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to...

PT-2026-77400

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

PT-2026-78052

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.32 Oracle Database Server versions 21.3 through 21.23 Oracle Database Server versions 23.4.0 through 23.26.3 Description A flaw exists in the Portable Clusterware component. An unauthenticated...

PT-2026-77741

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.2.25.0.000 Description A flaw in the Server component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to a complete takeov...

The vulnerability of the formWifiMacFilterGet() function (/goform/WifiMacFilterGet) in the Tenda i3 wireless access point software allows a hacker to execute arbitrary code or cause service failure.

The vulnerability of the formWifiMacFilterGet function /goform/WifiMacFilterGet in the Tenda i3 wireless access point software is related to the operation of writing data outside of the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow a malicious act...

The vulnerability of the formexeCommand()/goform/exeCommand function in the Tenda i3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formexeCommand/goform/exeCommand function in the Tenda i3 wireless access point software is related to the operation that goes beyond the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

The vulnerability of the formWifiMacFilterSet() function (/goform/WifiMacFilterSet) in the Tenda i3 wireless access point software allows a hacker to execute arbitrary code or cause service failure.

The vulnerability of the formWifiMacFilterSet function /goform/WifiMacFilterSet in the Tenda i3 wireless access point software lies in the issue where the operation’s output escapes the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow a malicious act...

The vulnerability of the formSetCfm() function (/goform/setcfm) in the Tenda i3 wireless access point software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function /goform/setcfm of the Tenda i3 wireless access point software is related to the execution of an operation outside the buffer in memory when processing the funcpara1 parameter. Exploiting this vulnerability could allow a malicious actor to execute...

The vulnerability of the formSetAutoPing() function (/goform/setAutoPing) in the Tenda i3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetAutoPing function /goform/setAutoPing of the Tenda i3 wireless access point software lies in the fact that the operation’s results may escape from memory when processing the parameters ping1 and ping2. Exploiting this vulnerability could allow a malicious actor to...

CVE-2026-5841

A weakness has been identified in Tenda i3 1.0.0.62204. The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could b...

The vulnerability of the R7WebsSecurityHandler() function in the Tenda i3 wireless access point software allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of function R7WebsSecurityHandler in the Tenda i3 wireless access point software is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain unauthorized acce...

EUVD-2026-20850

A weakness has been identified in Tenda i3 1.0.0.62204. The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could b...

CVE-2026-5841

A weakness has been identified in Tenda i3 1.0.0.62204. The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could b...

CVE-2026-5841 Tenda i3 HTTP R7WebsSecurityHandler path traversal

A weakness has been identified in Tenda i3 1.0.0.62204. The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could b...

CVE-2026-5841 Tenda i3 HTTP R7WebsSecurityHandler path traversal

A weakness has been identified in Tenda i3 1.0.0.62204. The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could b...

CVE-2026-5841

The CVE-2026-5841 is mapped to Tenda i3 1.0.0.6(2204), where the R7WebsSecurityHandler function in the HTTP Handler is vulnerable to path traversal. The weakness is exploitable remotely, with publicly available exploits, enabling manipulation that can impact confidentiality, integrity, and availa...

CVE-2026-5841

A weakness has been identified in Tenda i3 1.0.0.62204. The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could b...

CVE-2026-5841: Improper Limitation of a Pathname to a Restricted Directory

A weakness has been identified in Tenda i3 1.0.0.62204. The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could b...

Tenda i3 路径遍历漏洞

The Tenda i3 is a wireless access point device produced by the Chinese company Tenda. The version Tenda i3 1.0.0.62204 contains a path traversal vulnerability. This vulnerability stems from a path traversal issue within the R7WebsSecurityHandler function in the HTTP Handler component, which may...

CVE-2026-3970

A flaw has been found in Tenda i3 1.0.0.62204. Affected is the function formwrlSSIDget of the file /goform/wifiSSIDget. Executing a manipulation of the argument index can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used...