CVE-2026-103040 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enableprofiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted...

CVE-2026-97472

A flaw was found in the Linux kernel's IPv6 networking subsystem. An attacker on the local network can cause a denial of service to IPv6 temporary address generation by sending router advertisements that temporarily deprecate and then restore a network prefix. Because the kernel improperly...

CVE-2026-97440

A flaw was found in the Linux kernel's Qualcomm IPC Router QRTR networking subsystem. When processing resume transmission requests, a failure during control packet memory allocation does not properly release an acquired network node reference. A local user could exploit this condition under syste...

CVE-2026-7193

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service port 23 using static credentials...

CVE-2026-7192

The Dbit T-CPE301K 4G Mini WiFi Router is susceptible to a stack-based buffer overflow vulnerability. An authenticated attacker can trigger a denial of service (DoS) and a system reboot by sending a manipulated HTTP POST request to the /js/common/do_cmd.js endpoint. The vulnerability is caused by...

CVE-2026-7192 Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

CVE-2026-7193

The T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment is vulnerable to unauthorized access due to the use of predefined static credentials . An attacker connected to the same network can exploit the Telnet service (port 23) to gain full root access to the device. No specific reme...

Custom-Nuclei-Templates

Custom Nuclei Templates This collection of Nuclei templates is designed to enhance your security testing capabilities. Made a few custom templates and i might add more as time goes on. Introduction Nuclei is a powerful tool for fast and customizable vulnerability scanning. This repository contain...

CVE-2026-103040: Deserialization of Untrusted Data

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enableprofiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted...

PT-2026-102935

Name of the Vulnerable Software and Affected Versions LightLLM versions prior to 1.2.1 Description The router profiler service contains a flaw that allows remote code execution when the application is started with the --enable profiling flag. The service exposes an unauthenticated RPyC server wit...

PT-2026-102522

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service port 23 using static credentials...

EUVD-2026-88247

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in aircompressor, libarchive, gstreamer1, LIBPNG, bind9, giflib, react-router, dompurify

Summary IBM Optim version 1.0.0, 1.1.0 and 1.2.0 depends on open-source packages aircompressor, libarchive, gstreamer1, LIBPNG, bind9, giflib, react-router, dompurify which are affected by medium, high and critical severity vulnerabilities. IBM Optim 2.0.0 resolves these vulnerabilities by...

PT-2026-98688

In the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310 eth: drop URB after 0xffff reboot sentinel to prevent partial data heap overflow The 0xffff length sentinel detects a router reboot and schedules re-enabling of ethernet mode, but then falls through to the rest ...

Security Bulletin: Multiple Vulnerabilities in IBM Bob

Summary Multiple vulnerabilities were addressed in IBM Bob V 2.1.0 Vulnerability Details CVEID:CVE-2026-12537 DESCRIPTION: Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI versions prior to 0.39.1 and run-gemini-cli GitHub Action versions prior to 0.1.2...

Exploit for CVE-2026-96515

CVE-2026-96515: authenticated root command execution in Netlin...

CVE-2026-96515 Command Injection Vulnerability in Netlink ICT HG323RW Router

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...

CVE-2026-96515

The Netlink ICT HG323RW router is susceptible to a command injection vulnerability due to insufficient authorization and input validation controls within the diagnostic script import functionality . An authenticated attacker can exploit this by uploading and executing a specially crafted script v...

CVE-2026-96515 Command Injection Vulnerability in Netlink ICT HG323RW Router

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...

CVE-2026-96515: Missing Authorization

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...