CVE-2026-37459

creationtimestamp| type| source ---|---|--- 2026-05-04 20:18:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ilegyf52n...

CVE-2026-41923

WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the gateway POST parameter. Attackers can exploit...

CVE-2026-41924

WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the settime or StartSniffer functions. Attackers can...

CVE-2026-25863

creationtimestamp| type| source ---|---|--- 2026-05-04 19:28:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2fs6mh6j2e 2026-05-04 20:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2jj5y23l2t...

CVE-2026-42151

creationtimestamp| type| source ---|---|--- 2026-05-04 19:28:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2frpcll426 2026-05-07 18:07:47+00:00| seen| https://gist.github.com/cwayne18/c6798b17a9150ada7489927525e07176 2026-05-08 15:28:37+00:00| seen|...

CVE-2026-7768

creationtimestamp| type| source ---|---|--- 2026-05-04 19:21:22+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3ml2fex7c4s2n 2026-05-04 20:18:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ikvmow326 2026-05-04 22:45:08+00:00| seen|...

CVE-2026-41927 WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgi

WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved return address by sending a POST request with a Content-Length header exceeding 5...

CVE-2026-41924

WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the settime or StartSniffer functions. Attackers can...

EUVD-2026-27121

WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the settime or StartSniffer functions. Attackers can...

CVE-2025-47405

creationtimestamp| type| source ---|---|--- 2026-05-04 19:07:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2emokys72g...

CVE-2026-24781

creationtimestamp| type| source ---|---|--- 2026-05-04 18:30:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cks5l6l26 2026-05-08 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mleqj3brke26 2026-07-09 07:48:04+00:00| seen|...

CVE-2026-25863

Conditional Fields for Contact Form 7 WordPress plugin through version 2.7.2 contains an uncontrolled resource consumption vulnerability in the Wpcf7cfMailParser class where the hidehiddenmailfieldsregexcallback method reads an iteration count directly from user-supplied POST parameters without...

CVE-2026-32834

creationtimestamp| type| source ---|---|--- 2026-05-04 18:27:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cfeb6r52g 2026-05-04 18:41:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2d6d7s2p2e 2026-05-17 11:57:06+00:00| seen|...

CVE-2026-25293

creationtimestamp| type| source ---|---|--- 2026-05-04 18:10:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bgk2gs22l 2026-05-04 18:11:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bhl23yf2s 2026-05-04 21:59:19+00:00| seen|...

CVE-2026-42075

creationtimestamp| type| source ---|---|--- 2026-05-04 18:08:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bd3tods2l...

CVE-2026-42373

creationtimestamp| type| source ---|---|--- 2026-05-04 18:04:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2b2omiuz2g 2026-05-06 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ml6rfnpogi26...

CVE-2026-42812

creationtimestamp| type| source ---|---|--- 2026-05-04 18:02:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ax33zfg2n 2026-05-04 19:16:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2f4db6kr2i...

CVE-2026-42810

creationtimestamp| type| source ---|---|--- 2026-05-04 18:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2avc356h2k 2026-05-04 19:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2ffbqa2m2r...

CVE-2026-42809

creationtimestamp| type| source ---|---|--- 2026-05-04 18:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2av2pacn2r 2026-05-04 19:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2ekgftrk2p 2026-05-12 14:07:07+00:00| seen|...

CVE-2026-29169

creationtimestamp| type| source ---|---|--- 2026-05-04 17:44:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml27xfrq6y2i 2026-05-04 19:07:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2emvwpnx2w 2026-05-05 00:01:51+00:00| seen|...