CVE-2026-36608

The advisory concerns the Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909. A UPnP AddPortMapping issue allows an unauthenticated LAN attacker to forward external ports to the router’s admin interface by abusing the InternalClient field (accepting 192.168.1.1 or 127.0.0.1). This en...

EUVD-2026-34147

Mercusys AC12G EU V1 router with firmware AC12GEUV1200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP 192.168.1.1 or localhost 127.0.0.1 as InternalClient. An unauthenticated LAN attacker can expose the admin panel to the intern...

Exploit for Code Injection in Iptime N104S-R1_Firmware

CVE-2025-55423 — ipTIME UPnP Command Injection: Analysis & Rep...

MiniUPnP 安全漏洞

MiniUPnP is a set of UPnP tools developed by the Miniupnp project, which can be used in embedded systems. These tools enable devices in home and corporate networks to connect with each other. MiniUPnP has a security vulnerability, stemming from integer underflow in the parsing of SOAPAction...

PT-2026-28636

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N version 14 versions prior to EN 0.9.1 4.19 Build 260303 Rel.42399n V14 260303 TP-Link TL-WR841N version 14 versions prior to US 0.9.1.4.19 Build 260312 Rel. 49108n V14 0304 Description The issue resides within the UPnP...

Zyxel EX3510-B0 操作系统命令注入漏洞

The Zyxel EX3510-B0 is a security routing gateway developed by the Chinese company Zyxel. Versions of the Zyxel EX3510-B0 prior to 5.17ABUP.15.1C0 contain an operating system command injection vulnerability. This vulnerability stems from the UPnP feature’s susceptibility to command injections,...

CVE-2026-2175

A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub420618 of the file /goform/setupnp. This manipulation of the argument upnpenable causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to...

CVE-2026-2175

A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub420618 of the file /goform/setupnp. This manipulation of the argument upnpenable causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to...

CVE-2025-11676

Improper input validation vulnerability in TP-Link System Inc. TL-WR940N V6 UPnP modules, which allows unauthenticated adjacent attackers to perform DoS attack. This issue affects TL-WR940N V6 = Build 220801...

EUVD-2011-4426

Malware in sbrugna...

EUVD-2011-4431

Malware in sbrugna...

EUVD-2011-4429

Malware in sbrugna...

EUVD-2018-8048

Malware in sbrugna...

EUVD-2011-4430

Malware in sbrugna...

EUVD-2020-20832

Malware in sbrugna...

EUVD-2006-2562

Malware in sbrugna...

EUVD-2017-12020

Malware in sbrugna...

EUVD-2008-2947

Malware in sbrugna...

EUVD-2011-4427

Malware in sbrugna...

EUVD-2011-4432

Malware in sbrugna...