EUVD-2026-58608

A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow. The attack may be performe...

EUVD-2026-58599

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in stack-based buffer overflow. The attack can be execute...

EUVD-2026-58606

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19813

A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow. The attack may be performe...

CVE-2026-19812

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19812

CVE-2026-19812 affects TOTOLINK A800R (version 4.1.2cu.5137_B20200730) in the file path product.so, function UploadCustomModule. The issue is a stack-based buffer overflow caused by manipulation of the argument File in /cgi-bin/cstecgi.cgi. This vulnerability enables remote exploitation (network ...

CVE-2026-19811

TOTOLINK A800R devices running 4.1.2cu.5137_B20200730 are affected by a stack-based buffer overflow in the firewall.so module, specifically the function setIpQosRules in /cgi-bin/cstecgi.cgi. The vulnerability is triggered by manipulating the Comment argument, allowing a remote attacker to exploi...

CVE-2026-19811

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in stack-based buffer overflow. The attack can be execute...

EUVD-2026-58585

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

CVE-2026-19792 Tenda G0 httpd web management interface module setPortMapping buffer overflow

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

CVE-2026-19792

CVE-2026-19792 affects Tenda G0 devices; the httpd web management interface’s setPortMapping function in /goform/module is vulnerable to a buffer overflow via manipulated portMappingServer/porMappingtInternal/portMappingExternal. This enables remote exploitation with high impact (confidentiality,...

EUVD-2026-58584

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19791

CVE-2026-19791 – Tenda G0 httpd web management interface : A stack-based buffer overflow in the addStaticRoute function (file /goform/module) of the httpd web management interface. By manipulating the staticRouteNet argument, remote attackers could overflow the stack. Exploitation is possible rem...

EUVD-2026-58552

A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...

EUVD-2026-58575

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19790

Tenda G0 devices with the httpd Web Management Interface are affected. The vulnerability lies in the formSetPortMirror function (in /goform/module), where manipulating the portMirrorMirroredPorts argument causes a stack-based overflow. This can be triggered remotely and has publicly available exp...

CVE-2026-19789

The vulnerability CVE-2026-19789 affects Tenda AC1206 devices running 15.03.06.23_multi_TD01, specifically the httpd web management interface’s /goform/WifiGuestSet function set_wl_guest_iplist. Manipulating the argument shareSpeed triggers a stack-based buffer overflow, leading to remote code ex...

CVE-2026-19788

This CVE affects Tenda AC1206 running 15.03.06.23_multi_TD01. The vulnerability resides in the httpd web management interface, specifically the SetOnlineDevName function (/goform/SetOnlineDevName). User-controlled argument devName triggers a stack-based buffer overflow, permitting a remote attack...

CVE-2026-19787

The CVE-2026-19787 affects SourceCodester Air Cargo Management System 1.0. The vulnerability is an SQL injection via manipulation of the argument ID in the file /classes/Master.php?f=save_cargo_type, which can be triggered remotely. Public exploit information exists. This entry documents the affe...

CVE-2026-19771

A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...