CVE-2026-1409

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.0955. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the physic...

D-Link DIR-615 Operating System Command Injection

The D-Link DIR-615 is a wireless router produced by D-Link Corporation. Versions of D-Link DIR-615 prior to 4.10 contained a vulnerability related to operating system command injection. This vulnerability stemmed from incorrect operations on the parameter ipaddr in the component Web Management...

LEDE security vulnerabilities

LEDE is a router firmware developed by Coolsnowwolf’s individual developer. Versions of LEDE such as r25.10.1 and earlier contained security vulnerabilities. These vulnerabilities stemmed from an infinite loop in the Wi-Fi driver component bnlib.C, which could lead to a denial-of-service attack...

CVE-2025-21589: Authentication Bypass Using an Alternate Path or Channel

An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypass authentication and take administrative control of the device. This issue affects Session Smart Router: from 5.6.7 before 5.6.17, from...

Several products of Juniper Networks have security vulnerabilities

Juniper Networks Session Smart Conductor is a product of the American company Juniper Networks. Juniper Networks Session Smart Conductor is a centralized management and control platform for wide-area network architectures. Juniper Networks Session Smart Router is a software-based intelligent...

TOTOLINK NR1800X DoS

The vulnerability of the fromGetWifiGuestBasic function in the microprogrammed routing software TOTOLINK NR1800X is related to the operation that goes beyond the buffer in memory when processing the guestWrlPwd parameter. Exploiting this vulnerability could allow a remote attacker to cause servic...

EUVD-2026-4734

A vulnerability was detected in D-Link DIR-615 up to 4.10. This impacts an unknown function of the file /wizpolicy3machine.php of the component Web Management Interface. Performing a manipulation of the argument ipaddr results in os command injection. It is possible to initiate the attack remotel...

CVE-2026-24470

Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.24.0, when running Skipper as an Ingress controller, users with permissions to create an Ingress and a Service of type ExternalName can create routes that enable them to use Skipper's network access to reach...

CVE-2026-24437

CVE-2026-24437 affects Shenzhen Tenda W30E V2 firmware up to version 16.01.0.19(5037). The root cause is missing cache-control directives on pages serving sensitive administrative content, enabling browsers to cache credential-bearing responses and potentially expose them to subsequent unauthoriz...

CVE-2026-1409

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.0955. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the physic...

Tenda W30E cross-site scripting vulnerability

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 had a cross-site scripting vulnerability. This vulnerability stemmed from insufficient input validation in user-created functions, which could lead to storage-based cross-si...

Wavlink WN701AE File Access

The vulnerability of the /etc/shadow file in Wavlink WN701AE router microprogramming software is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

Tenda W30E Cross-Site Request Forgery Vulnerability

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 had a cross-site request forgery vulnerability. This vulnerability stemmed from the lack of cross-site request forgery protection in the management endpoints, which could...

Tenda W30E security vulnerabilities

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 have security vulnerabilities. These vulnerabilities stem from the use of predefined default passwords, which may allow attackers to gain access to the management interface...

Tenda W30E security vulnerabilities

The Tenda W30E is a router produced by the Chinese company Tenda. The Tenda W30E V2 and earlier versions have security vulnerabilities. These vulnerabilities stem from an authorization flaw in the user management API, which may allow users with low privileges to change the password of administrat...

Tenda W30E security vulnerabilities

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 have security vulnerabilities. These vulnerabilities stem from the use of insecure cross-device resource sharing policies by management endpoints, which may allow attackers ...

Tenda W30E security vulnerabilities

The Tenda W30E is a router from the Chinese company Tenda. The Tenda W30E suffers from an information disclosure vulnerability that can be exploited by an attacker to cause credential disclosure...

Beetel 777VR1 Access Control Vulnerability

Beetel 777VR1 is a router produced by the Beetel company. Versions of Beetel 777VR1 prior to 01.00.09/01.00.0955 contain a vulnerability related to access control. This vulnerability stems from improper access control in the UART interface, which could lead to physical device attacks...

CVE-2026-24470: Unintended Proxy or Intermediary

Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.24.0, when running Skipper as an Ingress controller, users with permissions to create an Ingress and a Service of type ExternalName can create routes that enable them to use Skipper's network access to reach...

Tenda AC8 fromSetRouteStatic() Code Execution

The vulnerability of the fromSetRouteStatic function in Tenda AC8 router software lies in the ability to write data beyond the buffer in memory during the processing of the list parameter. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service...