PT-2026-91446

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiat...

PT-2026-91119

A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub 41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public...

PT-2026-90781

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...

PT-2026-86570

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel set params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer hostname leads to off-by-one. The attack may be...

PT-2026-86568

Name of the Vulnerable Software and Affected Versions D-Link DIR-895L version A1 102b07 Description A remote command injection issue exists within the udhcpcd component. The flaw is located in the sendACK function of the udhcpcd/serverpacket.c file. An attacker can execute arbitrary commands...

PT-2026-83564

Name of the Vulnerable Software and Affected Versions D-Link DIR-825M version 1.1.8 Description A stack-based buffer overflow occurs in the Disk Formatting Handler Endpoint when processing the /boafrm/formDiskFormat endpoint. The issue is triggered by the manipulation of the partition argument...

PT-2026-83437

🚨 CVE-2026-70341 Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network. 🎖@cveNotify...

PT-2026-61036

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified chromedriver versions prior to 150.0.7871.128-1.1 Description A security issue was disclosed affecting Google Chrome and chromedriver...

PT-2026-57485

Name of the Vulnerable Software and Affected Versions Trendnet TEW-635BRM versions 1.0.0 through 1.0.03 Description A stack-based buffer overflow exists in the Web Service component. This occurs when the start httpd function in the /sbin/rc file improperly handles the device name argument, allowi...

PT-2026-49111

Name of the Vulnerable Software and Affected Versions Comma AI Openpilot version 0.11 Description An issue exists in the Pickle Module within the file selfdrive/modeld/modeld.py where the functions pickle.load and pickle.loads can be manipulated. This leads to deserialization, a process of...

PT-2026-42953

Name of the Vulnerable Software and Affected Versions Edimax BR-6478AC version 1.23 Description A buffer overflow can be triggered remotely via the POST Request Handler component. The issue exists within the formL2TPSetup function located in the '/goform/formL2TPSetup' endpoint when the...

PT-2026-42948

The severity is increased for this new vulnerability affecting H3C Magic B0 CVE-2026-9393 https://t.co/Epusx01gYB...

PT-2026-39536

Name of the Vulnerable Software and Affected Versions D-Link DCS-935L versions prior to 1.10.01 Description A remote buffer overflow exists in the HNAP Service component within the '/web/cgi-bin/hnap/hnap service' file. The issue occurs during the processing of the SetDeviceSettings function when...

PT-2026-39414

Name of the Vulnerable Software and Affected Versions EFM ipTIME A8004T version 14.18.2 Description A stack-based buffer overflow exists in the formWifiBasicSet function within the /goform/WifiBasicSet file. This issue can be triggered remotely by manipulating the security 5g argument...

PT-2026-36721

Name of the Vulnerable Software and Affected Versions Totolink N300RH version 3.2.4-B20220812 Description A security flaw in the Parameter Handler component allows a remote attacker to cause a buffer overflow. This occurs through the manipulation of the Password argument within the loginauth...

PT-2026-32125

A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing a manipulation of the argument page/menufacturer can lead to stack-based buffer overflow. The attack can be executed...

PT-2026-32046

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description Microsoft Edge is susceptible to a spoofing issue. The vulnerability's severity has been increased. The issue is related to the browser's ability to accurately represent...

PT-2026-30555

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A stack-based buffer overflow exists in the formSetFirewall function within the /goform/formSetFirewall file. Manipulation of the webpage argument triggers the overflow, allowing for remote execution ...

PT-2026-30384

Name of the Vulnerable Software and Affected Versions Tenda M3 version 1.0.0.10 Description A flaw exists in the Destination Handler component of Tenda M3 version 1.0.0.10. Manipulation of the policyType argument in the setAdvPolicyData function, accessible via the '/goform/setAdvPolicyData'...

PT-2026-27014

Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description A buffer overflow issue exists in the formSetQosBand function of the /goform/SetNetControlList file. Manipulation of arguments to this function can trigger the overflow, allowing for remote...