CVE-2026-0416: Improper Input Validation

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router...

MongoDB Server security vulnerabilities

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which can cause server...

Spring Framework Access Control Vulnerability

The Spring Framework is an application development framework developed by Spring in open source. Versions 5.3.0 to 5.3.48 of the Spring Framework contain a security access control vulnerability. This vulnerability arises from potential security bypasses when using the Kotlin Router DSL...

NETGEAR’s various products have security vulnerabilities

NETGEAR RBR850 is a product of the NETGEAR company. The NETGEAR RBR850 is a router. The NETGEAR RBS850 is also a router. The NETGEAR RBS750 is another router. Several NETGEAR products have security vulnerabilities. These vulnerabilities stem from insufficient buffer input validation, which may...

CVE-2026-36784

Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.54180 was discovered to contain a stack overflow in the ip parameter of the fromNetToolGet function. This vulnerability allows attackers to cause a Denial of Service DoS via a HTTP request...

PT-2026-48187

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted HTTP...

PT-2026-47828

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests, leading to a denial of service...

CVE-2026-36773

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the Go parameter of the asktoreboot function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-47820

Name of the Vulnerable Software and Affected Versions NETGEAR router models affected versions not specified Description Insufficient input validation allows an authenticated administrator with local network access to submit crafted input. This action bypasses intended management interface...

CVE-2026-36771

The Tenda W3 Wireless Router (firmware version v1.0.0.3(2204) ) is susceptible to a stack overflow vulnerability. The flaw resides in the wl_radio parameter of the formwrlSSIDset function. An unauthenticated attacker can exploit this by providing crafted input to trigger a Denial of Service (DoS)...

CVE-2026-36770

The Tenda US_W3V1.0BR wireless router firmware (v1.0.0.3) is affected by a stack overflow vulnerability within the ask_to_reboot function. Specifically, the flaw exists in the Go parameter , which can be triggered by a crafted input. This vulnerability allows an attacker to cause a Denial of Serv...

PT-2026-48179

Name of the Vulnerable Software and Affected Versions Tenda W3 version 1.0.0.32204 Description A stack overflow occurs in the formSetCfm function when processing the param 1 parameter. This allows an attacker to trigger a Denial of Service DoS, which is a condition where the device becomes...

CVE-2026-36773

The Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router (version v1.0.0.3(2204) ) is vulnerable to a stack overflow within the Go parameter of the ask_to_reboot function. An attacker can exploit this flaw by providing crafted input to trigger a Denial of Service (DoS) . No specific remedi...

CVE-2026-36772

The Tenda W3 Wireless Router (v1.0.0.3(2204)) is susceptible to a stack overflow vulnerability within the formwrlSSIDget function. This issue occurs specifically in the wl_radio parameter when processing a crafted input . An attacker can exploit this vulnerability to cause a Denial of Service (Do...

PT-2026-66652

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

CVE-2026-41847: Improper Access Control

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

PT-2026-47658

Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.3.0 through 5.3.48 Description Spring WebFlux applications may be subject to a security bypass when utilizing the Kotlin Router DSL. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-41847

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

Tenda W15E buffer error vulnerability

The Tenda W15E is a wireless router produced by the Chinese company Tenda. The version 15.11.0.10 of the Tenda W15E contains a security vulnerability. This vulnerability stems from a buffer overflow in the webAuthUserPwd parameter within the formModifyWebAuthUser function, which could allow...

CVE-2026-36794

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted HTTP...