CVE-2025-65349

The Each Italy Wireless Mini Router WIRELESS-N 300M (version v28K.MiniRouter.20190211 ) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in its web management interface. The root cause is the lack of input sanitization for the repeater AP SSID value. Attackers can exploit this b...

CVE-2025-65349

A Stored Cross-Site Scripting XSS vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at...

Each Italy Wireless Mini Router WIRELESS-N 300M has code-related vulnerabilities.

The Each Italy Wireless Mini Router WIRELESS-N 300M is a wireless router produced by Each Italy. There are code vulnerabilities in versions prior to 6.10.5 and 6.11.1, which stem from insecure .NET Remoting exposure in the SmartCardController service. These vulnerabilities could lead to arbitrary...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002199 advisory. The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in...

PT-2026-3105

Name of the Vulnerable Software and Affected Versions Each Italy Wireless Mini Router WIRELESS-N 300M version v28K.MiniRouter.20190211 Description A Stored Cross-Site Scripting XSS issue exists in the web management interface of the affected product. This allows attackers to execute arbitrary...

CVE-2025-65349: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at...

EUVD-2026-2707

A Stored Cross-Site Scripting XSS vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002388)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002388 advisory. net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers t...

Tenda AC10U fromadvsetlanip Code Execution

The vulnerability of the fromadvsetlanip function in the Tenda AC10U router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001839 advisory. The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001890)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001890 advisory. The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to caus...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002254 advisory. The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to caus...

CVE-2025-37165

A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A malicious actor could gain knowledge of internal network configuration details through inspecting impacted packets...

CVE-2026-0405

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin...

CVE-2026-0408

A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI...

CVE-2025-68707

An authentication bypass vulnerability in the Tongyu AX1800 Wi-Fi 6 Router with firmware 1.0.0 allows unauthenticated network-adjacent attackers to perform arbitrary configuration changes without providing credentials, as long as a valid admin session is active. This can result in full compromise...

D-Link DWR-M920 sub_464794 function buffer overflow vulnerability

The D-Link DWR-M920 is a 4GLTE wireless router manufactured by Youxun D-Link. The D-Link DWR-M920 suffers from a buffer overflow vulnerability that stems from the incorrect manipulation of the parameter submit-url in the function sub464794 in the file /boafrm/formDefRoute, for which no detailed...

D-Link DWR-M920 sub_42261C Function Stack Buffer Overflow Vulnerability

The D-Link DWR-M920 is a 4GLTE wireless router manufactured by Youxun D-Link. The D-Link DWR-M920 suffers from a stack buffer overflow vulnerability that stems from incorrect manipulation of the parameter ip6addr in the function sub42261C in the file /boafrm/formFilter, for which no detailed...

Tenda AX1806 security vulnerabilities

The Tenda AX1806 is a WiFi6 wireless router from Tenda China. The Tenda AX1806 suffers from a stack buffer overflow vulnerability that stems from the serviceName parameter of the sub65A28 function failing to properly validate the length size of the input data, which can be exploited by an attacke...

UTT 512W router strcpy() Code Execution

The vulnerability of the strcpy function in the /goform/formConfigCliForEngineerOnly file of the UTT 512W router microprogramming system is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code by...