CVE-2026-36772

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the wlradio parameter of the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-36773

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the Go parameter of the asktoreboot function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-36770

Shenzhen Tenda Technology Co., Ltd Tenda USW3V1.0BR v1.0.0.3 was discovered to contain a stack overflow in the Go parameter of the asktoreboot function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-35863

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server...

Tenda W15E DoS

The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserPwd parameter. Exploiting this vulnerability could allow a malicious actor to cause...

Tenda W15E DoS

The vulnerability of the formCropAndSetWewifiPic function in the microprogramming software for Tenda W15E routers is related to the issue of the operation exceeding the buffer boundaries in memory when processing the picCropName parameter. Exploiting this vulnerability could allow an attacker to...

Tenda W15E Router DoS

The vulnerability of the formAddWewifiWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wewifiWhiteUserInfo parameter. Exploiting this vulnerability could allow a remote attacker t...

Tenda W15E DoS

The vulnerability of the formAddWebAuthWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteUserInfo parameter. Exploiting this vulnerability could allow a malicious actor...

Tenda W15E fromSetDhcpRules DoS

The vulnerability of the fromSetDhcpRules function in the Tenda W15E router software is related to the operation that goes beyond the buffer in memory when processing the bindMACAddr parameter. Exploiting this vulnerability allows a remote attacker to trigger a service failure by sending a...

Tenda W15E DoS

The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserInfo parameter. Exploiting this vulnerability could allow a malicious actor to cause...

CVE-2026-46614: Improper Access Control

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, the Fission router registers an internal-style route — /fission-function/ and /fission-function/ / — for every Function object,...

Fission Access Control Vulnerability

Fission is an open-source function deployment framework based on Kubernetes. Versions of Fission prior to 1.23.0 contained a access control vulnerability. This vulnerability stemmed from routers registering internal routes for each Function object, allowing any caller who has access to the router...

Tenda W15E DoS

The vulnerability of the formModifyWebAuthUser function in the Tenda W15E router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserPwd parameter. Exploiting this vulnerability could allow an attacker to cause a...

Tenda W15E DoS

The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserInfo parameter. Exploiting this vulnerability could allow a malicious actor to cause...

Tenda W15E Router DoS

The vulnerability of the formModifyWebAuthWhiteUser function in the Tenda W15E router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteID parameter. Exploiting this vulnerability could allow a malicious actor to...

Tenda W15E DoS

The vulnerability of the formDelwebAuthPic function in the Tenda W15E router’s microprogramming software is related to the operation of pushing data out of the buffer into memory when processing the picName parameter. Exploiting this vulnerability could allow an attacker to cause a service failur...

Tenda W15E DoS

The vulnerability of the formSetNetCheckTools function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the hostname parameter. Exploiting this vulnerability could allow a malicious actor to cause servi...

Tenda W15E Router DoS

The vulnerability of the formAddWewifiWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wewifiWhiteUserInfo parameter. Exploiting this vulnerability could allow a remote attacker t...

Tenda W15E DoS

The vulnerability of the formDelStaState function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the macAddr parameter. Exploiting this vulnerability can allow a remote attacker to cause a service...

CVE-2026-41727 In Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior

Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header values before acting on them. A producer could send a record with a crafted retrytopic-attempts header to supply an out-of-range attempt count and cause the retry topic router to misidentify where the...