47266 matches found
CVE-2026-51641
Incorrect access control in the getWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh configuration and runtime state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
PT-2026-83179
Incorrect access control in the getAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain access-device policy and client state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51618
Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain setup wizard and onboarding configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51636
A vulnerability exists in the TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 due to incorrect access control in the getWiFiAclRules function. This flaw allows unauthenticated attackers to obtain Wi-Fi ACL rules by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. Th...
CVE-2026-51633
The TOTOLINK T6 router, specifically version 4.1.5cu.748_B20211015 , is vulnerable to incorrect access control within the getWiFiEasyGuestCfg function. This flaw allows unauthenticated attackers to obtain simplified guest Wi-Fi configurations, including sensitive guest credentials , by sending a ...
CVE-2026-53578
creationtimestamp| type| source ---|---|--- 2026-08-27 22:09:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3uevydce2e 2026-08-28 07:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4ubtmnvu2c...
CVE-2026-19092
creationtimestamp| type| source ---|---|--- 2026-08-27 22:08:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3uefzlzk2t 2026-08-28 08:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4vfmgy762j 2026-09-01 12:00:06+00:00| confirmed|...
CVE-2026-69543
creationtimestamp| type| source ---|---|--- 2026-08-27 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu3ubafakl2c...
CVE-2026-81525
creationtimestamp| type| source ---|---|--- 2026-08-27 22:00:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fdi7tx66oeqsz 2026-08-27 23:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3xbkhsju2z 2026-08-28 12:45:52+00:00| seen|...
CVE-2026-75325
creationtimestamp| type| source ---|---|--- 2026-08-27 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu3tcscpy42j...
CVE-2026-81728
creationtimestamp| type| source ---|---|--- 2026-08-27 21:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3qkelswu2o 2026-09-01 14:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muhlrktkrh2w 2026-09-03 13:35:40+00:00| seen|...
GO-2026-6297 linx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service (DoS) via a crafted POST request in github.com/andreimarcu/linx-server
linx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service DoS via a crafted POST request in github.com/andreimarcu/linx-server...
CVE-2026-81699
creationtimestamp| type| source ---|---|--- 2026-08-27 19:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3jutedft2r 2026-08-31 20:01:25+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mufp45rg2u2r 2026-09-04 08:37:06+00:00| seen|...
CVE-2026-65053
creationtimestamp| type| source ---|---|--- 2026-08-27 18:19:29+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3mu3hk763c22q...
PYSEC-2026-3779
opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...
PYSEC-2026-3779
opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...
CVE-2026-81703
opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...
CVE-2026-30073
An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2026-78276
creationtimestamp| type| source ---|---|--- 2026-08-27 17:11:11+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu3dq2yuc62a 2026-08-27 17:11:13+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117168581500496652...