CVE-2026-40855

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the pingip, pingsize, and pingtimes POST parameters. The root cause is the failure to verify and sanitize...

EUVD-2026-80672

WNC T-Mobile 5G Box IDU router contains a cross-site request forgery CSRF vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrftokenvalue parameter, accepting any arbitrary value as valid. This allows a remote attacker to perform unauthorized actions on the...

CVE-2026-40856 Config disclosure in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wncmaccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi...

EUVD-2026-80670

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the pingip, pingsize, and pingtimes POST parameters. The root cause is the failure to verify and sanitize...

EUVD-2026-80669

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/loginuser. An attacker can bypass authentication b...

CVE-2026-40854

CVE-2026-40854 affects the WNC T-Mobile 5G Box IDU router . The vulnerability resides in the portal.cgi component, where the session verification mechanism validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/login_user . Because this check does not properl...

EUVD-2026-80062

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the userpassshow.cgi component. Low-privilege attackers can exploit this flaw via uiconfig2.xml and misc.js to disclose router credentials...

EUVD-2026-80009

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header IP-AH authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the virtual router master role, enabling the...

PT-2026-93694

Name of the Vulnerable Software and Affected Versions WNC T-Mobile 5G Box IDU router versions prior to 1.1.0.651412 Description An authenticated attacker can execute arbitrary commands on the shell and gain root access to the system due to a command injection flaw. The issue occurs in the ping...

PT-2026-93698

Name of the Vulnerable Software and Affected Versions WNC T-Mobile 5G Box IDU router versions prior to 1.1.0.651412 Description The password change functionality within the 'portal.cgi' component contains an OS command injection flaw. The application fails to properly neutralize special elements ...

CVE-2026-58147: Improper Neutralization of Special Elements used in an OS Command

WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the httppasswdhidden and httppasswdConfirmhidden parameters, allowing an authenticated attacker to...

PT-2026-93696

Name of the Vulnerable Software and Affected Versions WNC T-Mobile 5G Box IDU router versions prior to 1.1.0.651412 Description A cross-site request forgery CSRF issue exists in the 'portal.cgi' component. The anti-CSRF mechanism fails to validate the csrf token value parameter, accepting any...

PT-2026-99441

TuxCare rebuilt @remix-run/router to address 1 CVE. Fixed in 1.23.0-tuxcare.3...

CVE-2026-58146: Improper Neutralization of Special Elements used in an OS Command

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the clicookie POST parameter. The clicookie parameter value is directly concatenated into a find command string without proper...

CVE-2026-40856: Missing Authentication for Critical Function

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wncmaccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi...

CVE-2026-40855: Improper Neutralization of Special Elements used in an OS Command

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the pingip, pingsize, and pingtimes POST parameters. The root cause is the failure to verify and sanitize...

The vulnerability of the ssdpcgi_main() function in the SSDP component of the D-Link DIR-820LW router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the ssdpcgimain function in the SSDP component of the D-Link DIR-820LW router’s software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the `redirect_count_down_page` function in D-Link’s router software DHP-1320 allows a hacker to execute arbitrary code.

The vulnerability of the redirectcountdownpage function in D-Link’s DHP-1320 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the sub_452CCC() function in D-Link DWR-M960 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub452CCC function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

CVE-2026-76859

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the userpassshow.cgi component. Low-privilege attackers can exploit this flaw via uiconfig2.xml and misc.js to disclose router credentials...