CVE-2026-94138 Chengdu Feiyuxing Technology Feiyu Star Router send_order.cgi command injection

A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /sendorder.cgi?parameter=delexpmac. The manipulation of the argument mac results in command injection. The attack may be launched remotely. T...

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 software allows a perpetrator to execute arbitrary commands.

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the mac parameter. Exploiting this vulnerability can allow an attacker to...

CVE-2026-38142

An unauthenticated command injection vulnerability in the /goform/fastsettinginternetset endpoint of Tenda AC18 v15.03.05.05 allows attackers to execute arbitrary commands via a crafted payload injected into the mac parameter...

CVE-2026-58452

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by supplying a malicious Wireless parameter to the HTTP PUT NetSDK/Factory SetMAC endpoint. Attackers can craft a...

EUVD-2026-41048

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by supplying a malicious Wireless parameter to the HTTP PUT NetSDK/Factory SetMAC endpoint. Attackers can craft a...

PT-2026-54758

An unauthenticated command injection vulnerability in the /goform/fast setting internet set endpoint of Tenda AC18 v15.03.05.05 allows attackers to execute arbitrary commands via a crafted payload injected into the mac parameter...

CVE-2026-38142: Improper Neutralization of Special Elements used in a Command

An unauthenticated command injection vulnerability in the /goform/fastsettinginternetset endpoint of Tenda AC18 v15.03.05.05 allows attackers to execute arbitrary commands via a crafted payload injected into the mac parameter...

CVE-2026-38142

An unauthenticated command injection vulnerability in the /goform/fastsettinginternetset endpoint of Tenda AC18 v15.03.05.05 allows attackers to execute arbitrary commands via a crafted payload injected into the mac parameter...

CVE-2026-38142

An unauthenticated command injection vulnerability in the /goform/fastsettinginternetset endpoint of Tenda AC18 v15.03.05.05 allows attackers to execute arbitrary commands via a crafted payload injected into the mac parameter...

CVE-2026-38142

The Tenda AC18 router, specifically running firmware version v15.03.05.05 , is susceptible to an unauthenticated command injection vulnerability. The flaw exists in the /goform/fast_setting_internet_set endpoint, where a lack of proper neutralization of special elements allows an attacker to exec...

CVE-2026-38142

An unauthenticated command injection vulnerability in the /goform/fastsettinginternetset endpoint of Tenda AC18 v15.03.05.05 allows attackers to execute arbitrary commands via a crafted payload injected into the mac parameter...

The vulnerability of D-link DIR-823X router microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of D-link DIR-823X router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Tenda AC7 stack buffer overflow vulnerability (CNVD-2026-32972)

The Tenda AC7 is a 1200m1 11ac dual-band wireless router designed for large households undergoing broadband upgrades and router replacements. The Tenda AC7 has a stack buffer overflow vulnerability. This vulnerability stems from improper handling of input data in the mac parameter of the...

CVE-2026-51845

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter...

PT-2026-50968

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack buffer overflow occurs in the '/goform/AdvSetMacMtuWan' endpoint through the mac parameter. A stack buffer overflow is a condition where a program writes more data to a buffer located on the...

CVE-2026-51845

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter...

CVE-2026-51845: Undefined Security Weakness

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter...

CVE-2026-51845

The CVE-2026-51845 entry concerns a stack buffer overflow in Tenda AC7 firmware (v15.03.06.44) specifically in the /goform/AdvSetMacMtuWan interface via the mac parameter. The connected documents provide concrete details of the affected product and the vulnerable component, but do not specify a p...

Tenda F451 operating system command injection vulnerability

The Tenda F451 is a SOHO wireless router launched by TENDA. The Tenda F451 has a vulnerability related to operating system command injection. This vulnerability stems from the improper handling of the mac parameter in the formWriteFacMac function within the /goform/WriteFacMac file. An attacker c...

CVE-2026-11556

A security flaw has been discovered in Tenda F451 1.0.0.7/1.0.0.9. Impacted is the function formWriteFacMac of the file /goform/WriteFacMac of the component Web Management Interface. Performing a manipulation of the argument mac results in os command injection. Remote exploitation of the attack i...