EUVD-2026-72036

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...

CVE-2026-86151

CVE-2026-86151 affects Tenda CP3 firmware version 27.5.57.101 . The vulnerability is an OS command injection in the function sub_2F77E8 of the file Apis/system.c , within the Network Configuration Management component. The attack can be initiated remotely and requires high privileges (e.g., an au...

rConfig 代码问题漏洞

rConfig is an open source network configuration management utility. A security vulnerability exists in rConfig version v3.9.6. An attacker exploits the vulnerability to execute arbitrary code via specially crafted PHP files...

rConfig server-side request forgery vulnerability

rConfig is an open source network configuration management utility. rConfig is vulnerable to server-side request forgery, which could be exploited by an attacker to open a connection to a machine via the deviceIpAddr and connPort parameters...

rConfig information disclosure vulnerability

rConfig is an open source network configuration management utility. rConfig version 3.9.5 is vulnerable to an information disclosure vulnerability that stems from a faulty implementation in the /lib/crud/configcompare.crud.php file. A remote attacker could exploit this vulnerability to read files...

Unspecified vulnerability in rConfig

rConfig is an open source network configuration management utility . A security vulnerability exists in rConfig version 3.9.3. An attacker can exploit this vulnerability to bypass local security restrictions...

ManageEngine Network Configuration Management Elevation of Privilege Vulnerability

Network Configuration Manager is a Network Change, Configuration and Compliance Management NCCM solution. An elevation of privilege vulnerability exists in ManageEngine Network Configuration Management, which allows an attacker to exploit the vulnerability to elevate privileges to become an...

ManageEngine Network Configuration Management Build 11000 CSRF

Title:- Cross-Site Request Forgery CSRF Vulnerability in ManageEngine Network Configuration Management Author: Kaustubh G. Padwad Vendor: ZOHO Corp Product: ManageEngine Network Configuration Manager Tested Version: : Network Configuration Manager Build 11000 Severity: HIGH About the Product:...

ManageEngine Network Configuration Management CSRF

Title:- Cross-Site Request Forgery CSRF Vulnerability in ManageEngine Network Configuration Management Author: Kaustubh G. Padwad Vendor: ZOHO Corp Product: ManageEngine Network Configuration Manager Tested Version: : Network Configuration Manager Build 11000 Severity: HIGH About the Product:...