27026 matches found
PT-2026-88157
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
CVE-2026-79588
U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...
CVE-2026-82069: Improper Removal of Sensitive Information Before Storage or Transfer
A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations. An improper conditional check in the serialization logic causes the data redaction mechanism to be bypasse...
CVE-2026-82075: Allocation of Resources Without Limits or Throttling
An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router port and has not authenticated can supply connection-monitoring parameters that cause the server to expend CPU resources...
CVE-2026-82754 ash_authentication_oauth2_server aliases every protocol endpoint under /.well-known, bypassing path-scoped controls
Improper Protection of Alternate Path vulnerability in ash-project ashauthenticationoauth2server exposes the state-changing OAuth endpoints under an unintended URL prefix, bypassing controls scoped to the canonical prefix. oauth2serverprotocolroutes/1 in...
LOYTEC L-IP BACnet/IP Routers Out-of-bounds Read (CVE-2026-55732)
The BACnet packet parser of a LOYTEC L-IP BACnet/IP router reads out of bounds of the internal 'bacdtdaystillmonth' lookup table in 'bacdtdatetimetotod' when it processes a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet carrying an invalid month value. An unauthenticated...
LOYTEC L-IP BACnet/IP Routers Stack-based Buffer Overflow (CVE-2026-55728)
The 'cmdipaddrconflict' subcommand of the SUID-root '/usr/bin/ltsudo' utility on a LOYTEC L-IP BACnet/IP router copies a user-supplied network interface name into a fixed 20-byte stack buffer using 'strcpy' without bounds checking. A 'superadmin'-group attacker can supply an overly long interface...
LOYTEC L-IP BACnet/IP Routers Improper Privilege Management (CVE-2026-12502)
A local attacker who is a member of the 'superadmin' group can reset the password of any LARM user on a LOYTEC L-IP BACnet/IP router, including the 'larmapp' service account, via the 'set-passwd' subcommand of the '/usr/bin/ltsudo' utility. This bypasses the authorization checks that should limit...
LOYTEC L-IP BACnet/IP Routers Cross-site Scripting (CVE-2026-12496)
An unauthenticated remote attacker can inject and store malicious JavaScript in the OPC XML-DA server statistics page /webui/statistics/opcsrv of a LOYTEC L-IP BACnet/IP router by sending a crafted 'User-Agent' header in a POST request to the device's '/da' endpoint. The script executes in an...
LOYTEC L-IP BACnet/IP Routers Improper Authentication (CVE-2026-12504)
The PAM configuration of a LOYTEC L-IP BACnet/IP router uses the 'pamunix.so nullok' option, which permits authentication against any local account that has an empty password field in '/etc/passwd'. A local attacker can leverage an account left without a password to authenticate as uid=0 and obta...
VulnCheck KEV: CVE-2025-60687
An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619B20230130 within the cstecgi.cgi binary sub41EC68 function. The binary reads the "imei" parameter from a web request and verifies only that it is 15 characters long. The parameter is the...
Moxa Router Access Control
The vulnerabilities of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software are related to deficiencies in access control. Exploiting these vulnerabilities can allow an attacker to gain access to confidential information...
Moxa Router Improper Parameter Handling
The vulnerability of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software is related to improper handling of parameter length discrepancies. Exploiting this vulnerability can allow an attacker to trigger service failures...
Malicious code in @domyjs/router (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6506d9bb7ba386d56ee4e9f326482fd887e63e1b7ebe674f8df34c8c75cf1b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15955 Malicious code in @domyjs/router (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6506d9bb7ba386d56ee4e9f326482fd887e63e1b7ebe674f8df34c8c75cf1b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-17255
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...
EUVD-2026-71480
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...
CVE-2026-17255 IBM i is Affected By Denial of Service Vulnerability []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...
CVE-2026-17255
IBM i versions 7.6, 7.5, 7.4, and 7.3 are affected by a denial of service vulnerability caused by improper validation of the prefix length in ICMPv6 Router Advertisements , classified as CWE-787 (Out-of-bounds Write) . A remote attacker can trigger a DoS with low complexity and no privileges requ...
CVE-2026-17255 IBM i is Affected By Denial of Service Vulnerability []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...