Lucene search
+L

25 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•8 views

The vulnerability of the ovpn_tcp_close() function in the drivers/net/ovpn/tcp.c module of the Linux kernel’s network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ovpntcpclose function in the drivers/net/ovpn/tcp.c module of the Linux kernel’s network device driver is related to a race condition in the signal processing routine. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

8.4CVSS6.7AI score0.00194EPSS
SaveExploits0References7Affected Software2
RedhatCVE
RedhatCVE
•added 2026/07/21 5:10 a.m.•11 views

CVE-2026-64044

A flaw was found in the Linux kernel's OpenVPN ovpn module. An error in the ovpnnlpeernewdoit function's error handling for TCP connections can lead to a use-after-free vulnerability. This occurs because the peer's memory is prematurely released while userspace processes may still hold active...

7.8CVSS6.5AI score0.00184EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/07/21 5:10 a.m.•14 views

CVE-2026-64043

A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an ovpn interface is being deleted while a new peer is simultaneously added via netlink. This timing issue may cause the network device to become unresponsive, preventing its proper removal and leading to a denial...

5.7AI score0.00206EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/07/21 5:09 a.m.•10 views

CVE-2026-64045

A flaw was found in the Linux kernel's OpenVPN ovpn TCP module. A race condition in the ovpntcpclose function allows it to access memory after it has been freed. This vulnerability arises when the function attempts to use a socket peer pointer after its associated socket object has been...

8.4CVSS7.2AI score0.00194EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/05/07 8:21 p.m.•21 views

CVE-2026-30815

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modificatio...

8.5CVSS7.6AI score0.02182EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/08 9:33 p.m.•15 views

EUVD-2026-20548

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

6.8CVSS6AI score0.00361EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/08 9:33 p.m.•16 views

EUVD-2026-20546

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

6.8CVSS6AI score0.00361EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/08 7:25 p.m.•26 views

CVE-2026-30815

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modificatio...

8.5CVSS0.02182EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/04/08 5:53 p.m.•38 views

CVE-2026-30817 Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

6.8CVSS0.00361EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/08 5:53 p.m.•30 views

CVE-2026-30817

CVE-2026-30817 describes an external configuration control vulnerability in the OpenVPN module of TP-Link AX53 (v1.0) that could allow an authenticated adjacent attacker to read arbitrary files when processing a malicious configuration file. The effect is potential unauthorized access to sensitiv...

6.8CVSS6AI score0.00361EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/08 5:53 p.m.•24 views

CVE-2026-30817 Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

6.8CVSS6AI score0.00361EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/08 5:53 p.m.•35 views

CVE-2026-30816 Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

6.8CVSS0.00361EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/08 5:53 p.m.•30 views

CVE-2026-30816 Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

6.8CVSS6AI score0.00361EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/08 5:53 p.m.•28 views

CVE-2026-30816

The CVE-2026-30816 entry details an external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0. An authenticated adjacent attacker can read arbitrary files when a malicious configuration file is processed, potentially leading to unauthorized access to sensitive dat...

6.8CVSS6AI score0.00361EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/04/08 5:52 p.m.•38 views

CVE-2026-30815 OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modificatio...

8.5CVSS0.02182EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/08 5:52 p.m.•22 views

CVE-2026-30815 OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modificatio...

8.5CVSS7.6AI score0.02182EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•23 views

TP-Link Archer AX53 安全漏洞

The TP-Link Archer AX53 is a dual-core router produced by TP-Link Corporation. Prior versions of the TP-Link Archer AX53, including v1.0, 1.7.1 Build 20260213, contained security vulnerabilities. These vulnerabilities were due to OS command injection in the OpenVPN module, which could lead to the...

8.5CVSS7.5AI score0.02182EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•17 views

TP-Link Archer AX53 安全漏洞

The TP-Link Archer AX53 is a dual-core router produced by TP-Link Corporation. Prior versions of the TP-Link Archer AX53, including v1.0, 1.7.1 Build 20260213, contained security vulnerabilities. These vulnerabilities stemmed from the OpenVPN module’s ability to allow external control, which coul...

6.8CVSS6AI score0.00361EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2026-30815: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modificatio...

8.5CVSS6.4AI score0.02182EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2026-30817: External Control of System or Configuration Setting

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

6.8CVSS6AI score0.00361EPSS
SaveExploits0References5
Rows per page
Query Builder