27023 matches found
CVE-2026-3867
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this...
EUVD-2026-25756
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this...
CVE-2026-3867
CVE-2026-3867 and CVE-2026-3868 affect Moxa’s Secure Router. CVE-2026-3867: improper ownership management may allow a low-privileged authenticated user to access a configuration file containing the hashed admin password when the config is exported, exposing sensitive information (confidentiality ...
Tenda F456 缓冲区错误漏洞
The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer overflow vulnerability. This vulnerability stems from improper handling of parameters in the formWrlExtraSet function of the goform/WrlExtraSet file within the httpd...
PT-2026-42902
Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn versions prior to 1.31 Description Remote OS command injection is possible within the webs component. The issue exists in the formWizSurvey function located in the '/goform/formWizSurvey' endpoint. Manipulation of the...
PT-2026-43100
Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn version 1.31 Description A stack-based buffer overflow occurs in the formLogout function within the '/goform/formLogout' endpoint. This issue is triggered by the manipulation of the submit-url argument, which can allow a remo...
TOTOLINK A8000RU 命令注入漏洞
TOTOLINK A8000RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A8000RU 7.1cu.643b20200521 version contains a command injection vulnerability. This vulnerability stems from improper handling of parameters in the setLoginPasswordCfg function within the CGI Handler...
Tenda F456 缓冲区错误漏洞
The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer overflow vulnerability. This vulnerability stems from improper handling of the parameter mitlinktype in the formQuickIndex function of the httpd component’s...
PT-2026-35345
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this...
D-Link DIR-825 缓冲区错误漏洞
The D-Link DIR-825 is a router produced by D-Link Corporation. Versions of the D-Link DIR-825 prior to 3.00b32 contained a buffer error vulnerability. This vulnerability stemmed from the AddPortMapping function in the upnpsoap.c file of the miniupnpd component, where the operation on the paramete...
PT-2026-35346
An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a buff...
PT-2026-35348
A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Executing a manipulation of the argument Go can lead to buffer overflow. The attack can be executed remotely. The exploit has been...
EUVD-2026-25898
A command injection vulnerability exists in Tenda AC18 V15.03.05.05multi. The vulnerability is located in the /goform/SetSambaCfg interface, where improper handling of the guestuser parameter allows attackers to execute arbitrary system commands...
D-Link DIR-825 缓冲区错误漏洞
The D-Link DIR-825 is a router produced by D-Link Corporation. The D-Link DIR-825 3.00b32 version has a buffer error vulnerability. This vulnerability stems from the operations of the NMBDprocess function in the sserver.c file of the nmbd component, which may lead to a buffer overflow...
PT-2026-35454
A vulnerability has been found in Totolink A8000RU 7.1cu.643 b20200521. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument HTTP leads to os command injection. The attack may be performed from remote. The exploit has...
Tenda F456 缓冲区错误漏洞
The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer overflow vulnerability. This vulnerability stems from the fromwebExcptypemanFilter function in the httpd component’s/goform/webExcptypemanFilter file, where improper...
PT-2026-35342
A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of the argument wanmode causes buffer overflow. The attack may be initiated remotely. The exploit has been made available to the...
CVE-2026-3868: Improper Handling of Length Parameter Inconsistency
An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a buff...
TOTOLINK A8000RU 命令注入漏洞
The TOTOLINK A8000RU is a wireless router produced by TOTOLINK, a Chinese company. The Totolink A8000RU 7.1cu.643b20200521 version contains a command injection vulnerability. This vulnerability stems from the function setNtpCfg in the CGI Handler component’s file/cgi-bin/cstecgi.cgi, which...
CVE-2026-3867: Improper Ownership Management
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this...