CVE-2025-15101

An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary system commands via a crafted parameter. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisor...

ASUS Router security vulnerabilities

ASUS Router is a router app developed by ASUS Corporation in China. ASUS Router has a security vulnerability, which stems from a cross-site request forgeing vulnerability in the web management interface. This vulnerability may allow operations to be performed with the existing permissions of...

CVE-2025-15101: Improper Neutralization of Special Elements used in an OS Command

A Cross-Site Request Forgery CSRF vulnerability has been identified in the Web management interface of certain ASUS router models. This vulnerability potentially allows actions to be performed with the existing privileges of an authenticated user on the affected device, including the ability to...

PT-2026-28188

Name of the Vulnerable Software and Affected Versions ASUS routers affected versions not specified Description A Cross-Site Request Forgery CSRF issue exists in the Web management interface of ASUS routers. This allows actions to be performed with the privileges of an authenticated user. This...

TP-Link TL-WR850N security vulnerabilities

The TP-Link TL-WR850N is a WiFi router produced by the TP-Link company. The TP-Link TL-WR850N v3 has a security vulnerability. This vulnerability arises from the fact that, when the serial interface is enabled and under weak authentication protection, management credentials and Wi-Fi credentials...

TP-LINK TL-WR841N security vulnerabilities

The TP-LINK TL-WR841N is a wireless router produced by TP-LINK Corporation. Versions of the TP-LINK TL-WR841N prior to v14 EN0.9.1 4.19 Build 260303 Rel.42399n V14260303 and US0.9.1.4.19 Build 260312 Rel.49108n V140304 contained security vulnerabilities. These vulnerabilities were caused by...

PT-2026-30536

Impact In a Cross-Site Request Forgery attack, untrusted web content causes browsers to send authenticated requests to web servers which use cookies for authentication. While the web content is prevented from reading the request's response due to the Cross-Origin Request Sharing CORS protocol, th...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1039 more potentially affected by CVE-2026-33671 via picomatch (>=4.0.1, <=4.0.3)

picomatch NPM version =4.0.1, =11.7.1, =1.2.0, =8.3.0-rc.2, =1.0.25, =0.26.4, =0.0.47, =10.0.0-alpha.1, =10.0.0-prerelease.90, =13.0.0-next.10, =10.0.0-prerelease.90, =0.0.1-development, =0.0.1, =2.0.0, =5.0.0 and more Source cves: CVE-2026-33671 Source advisory: OSV:GHSA-C2C7-RCM5-VVQJ...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1039 more potentially affected by CVE-2026-33671 via picomatch (>=4.0.1, <=4.0.3)

picomatch NPM version =4.0.1, =11.7.1, =1.2.0, =8.3.0-rc.2, =1.0.25, =0.26.4, =0.0.47, =10.0.0-alpha.1, =10.0.0-prerelease.90, =13.0.0-next.10, =10.0.0-prerelease.90, =0.0.1-development, =0.0.1, =2.0.0, =5.0.0 and more Source cves: CVE-2026-33671 Source advisory: GHSA-C2C7-RCM5-VVQJ...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1039 more potentially affected by CVE-2026-33671 via picomatch (>=4.0.1, <=4.0.3)

picomatch NPM version =4.0.1, =11.7.1, =1.2.0, =8.3.0-rc.2, =1.0.25, =0.26.4, =0.0.47, =10.0.0-alpha.1, =10.0.0-prerelease.90, =13.0.0-next.10, =10.0.0-prerelease.90, =0.0.1-development, =0.0.1, =2.0.0, =5.0.0 and more Source cves: CVE-2026-33671 Source advisory: SNYK:JS-PICOMATCH-15765511...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 RSC lab intentionally vulnerable Local Doc...

CVE-2026-20083

CVE-2026-20083 describes a DoS vulnerability in the SCP server feature of Cisco IOS XE. An authenticated, low-privilege local attacker can trigger a reload via a crafted SCP command issued over SSH due to improper handling of a malformed request. The practical impact is a device DoS from unexpect...

CVE-2026-20125

A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to improper validation ...

kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init

A flaw was found in the Linux kernel's bridge multicast functionality. A local user could trigger a use-after-free vulnerability, a type of memory corruption, by improperly configuring network bridge router ports. This issue arises because the system fails to correctly remove ports from its...

SHARP’s various products have access control error vulnerabilities

Sharp HR02 is a product of Japanese company Sharp. The Sharp HR02 is a home router. The Sharp SH-52B is a wireless local area network connection station. The Sharp SH-54C is also a wireless local area network connection station. Several Sharp products have vulnerabilities related to access contro...

EUVD-2025-208944

A Denial-of-Service DoS vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a processing error that causes the httpd service to crash. Successful exploitation may allow the attacker to cause service interruption,...

Security Bulletin: Enumeration of users, compromised data confidentiality and integrity, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to enumeration of users, compromised data confidentiality and integrity, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-22029 DESCRIPTION: React Router is a router for React. In...

CVE-2026-4566

A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be...

kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init

A flaw was found in the Linux kernel's bridge multicast functionality. A local user could trigger a use-after-free vulnerability, a type of memory corruption, by improperly configuring network bridge router ports. This issue arises because the system fails to correctly remove ports from its...

Tenda A15 UploadCfg() Code Execution

The vulnerability of the UploadCfg function in the Tenda A15 router’s microprogramming software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the File parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sendi...