Lucene search
K

3777 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:14 p.m.3 views

CVE-2026-0114

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS6.5AI score0.00306EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:5 p.m.5 views

CVE-2025-15519

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

8.5CVSS6.1AI score0.00619EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/23 6:30 p.m.5 views

EUVD-2025-208940

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

8.5CVSS6.1AI score0.00619EPSS
Exploits0References6
NVD
NVD
added 2026/03/23 6:16 p.m.4 views

CVE-2025-15519

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

8.5CVSS0.00619EPSS
Exploits0References5
CVE
CVE
added 2026/03/23 6:1 p.m.8 views

CVE-2025-15519

The CVE-2025-15519 affects TP-Link Archer NX200/NX210/NX500/NX600 devices, where an improper input handling in the modem-management CLI allows authenticated administrators to inject commands that are executed by the OS. This can impact confidentiality, integrity, and availability as described. No...

8.5CVSS6.1AI score0.00619EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/23 6:1 p.m.3 views

CVE-2025-15519 Command Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX600

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

8.5CVSS6.1AI score0.00619EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/03/23 6:1 p.m.22 views

CVE-2025-15519 Command Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX600

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

8.5CVSS0.00619EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/23 6:1 p.m.6 views

CVE-2025-15519

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

8.5CVSS6.1AI score0.00619EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.4 views

PT-2026-27164

Name of the Vulnerable Software and Affected Versions TP-Link Archer NX200 TP-Link Archer NX210 TP-Link Archer NX500 TP-Link Archer NX600 Description A flaw exists in how input is handled within an administrative command-line interface CLI used for modem management. This allows a specially crafte...

8.5CVSS6.1AI score0.00619EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/03/12 12:0 a.m.5 views

CVE-2026-26792

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the setupgrade function via the modemurl, targetversion, currentversion, firmwareupload, hashtype, hashvalue, and upgradetype parameters. These vulnerabilities allow attackers to execute arbitrary...

6.1AI score0.02776EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.4 views

PT-2026-25025

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set upgrade function via the modem url, target version, current version, firmware upload, hash type, hash value, and upgrade type parameters. These vulnerabilities allow attackers to execute...

6AI score0.02776EPSS
Exploits1References4
EUVD
EUVD
added 2026/03/10 9:32 p.m.4 views

EUVD-2026-10851

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00306EPSS
Exploits0References2
NVD
NVD
added 2026/03/10 9:16 p.m.6 views

CVE-2026-0120

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS0.00306EPSS
Exploits0References2
NVD
NVD
added 2026/03/10 9:16 p.m.3 views

CVE-2026-0114

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS0.00306EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/10 8:46 p.m.3 views

CVE-2026-0120

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00306EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 8:46 p.m.4 views

CVE-2026-0120

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00306EPSS
Exploits0References2
CVE
CVE
added 2026/03/10 8:46 p.m.18 views

CVE-2026-0120

CVE-2026-0120 affects the modem (baseband) and is caused by an incorrect bounds check leading to an out-of-bounds write. This could enable remote code execution without privileges and without user interaction. Public details across sources confirm the issue and its critical impact, but do not pro...

9.8CVSS6.3AI score0.00306EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/10 8:46 p.m.26 views

CVE-2026-0120

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00306EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 8:46 p.m.3 views

CVE-2026-0114

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00306EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/10 8:46 p.m.3 views

CVE-2026-0114

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00306EPSS
Exploits0References1
Rows per page
Query Builder