CVE-2026-9030

A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent systool operations. By sending crafted systool instructions through the asynchronous request path,...

CVE-2026-15548

A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affects the function sub407220 of the file /usr/sbin/httpd of the component DNS List Rendering. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely...

Vulnerability of the fromP2pListFilter() function in the httpd daemon of the microprogrammed routing device Tenda F453, which allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the fromP2pListFilter function in the Tenda F453 router microprogramming software occurs due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

CVE-2026-10192

The CVE concerns Tenda W12 (v3.0.0.7(4763)), in /bin/httpd, where the function set_local_time_0 can be manipulated via the Time argument to trigger a stack-based buffer overflow. This enables a remote, network-accessible exploit with publicly available code, leading to high impact on confidential...

CVE-2026-33523 affecting package httpd for versions less than 2.4.67-1

CVE-2026-33523 affecting package httpd for versions less than 2.4.67-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-8265

A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function getlogfile of the file /goform/getLogFile of the component httpd. The manipulation of the argument wans.flag leads to os command injection. The attack can be initiated remotely. The exploit...

EUVD-2026-29019

A security flaw has been discovered in Tenda AC6 15.03.06.49multiTDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd. Performing a manipulation of the argument mac/ssid results in os command injection. It is possible to initiate the attack...

CVE-2026-7554

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitatio...

CVE-2026-7100 Tenda F456 httpd Natlimit fromNatlimitof buffer overflow

A flaw has been found in Tenda F456 1.0.0.5. The impacted element is the function fromNatlimitof of the file /goform/Natlimit of the component httpd. Executing a manipulation can lead to buffer overflow. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2026-7054 Tenda F456 httpd PPTPDClient fromPptpUserAdd buffer overflow

A weakness has been identified in Tenda F456 1.0.0.5. This vulnerability affects the function fromPptpUserAdd of the file /goform/PPTPDClient of the component httpd. Executing a manipulation of the argument opttype/usernamewith can lead to buffer overflow. The attack can be executed remotely. The...

Tenda CH22 路径遍历漏洞

Tenda CH22 is a network device produced by the Chinese company Tenda. The version Tenda CH22 1.0.0.6468 contains a path traversal vulnerability. This vulnerability stems from a path traversal issue within the R7WebsSecurityHandler function in the httpd component, which may lead to path traversal...

The vulnerability of the httpd module implementation in microprogramming software enhances the capabilities of TP-Link TL-WA850RE V2 and V3 wireless signal amplifiers. This allows attackers to download configuration files.

The vulnerability of the httpd module implementation in microprogramming software for TP-Link’s wireless signal amplifiers TL-WA850RE V2 and V3 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to download the configuration file remote...

CVE-2025-14655

A security flaw has been discovered in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd. Performing a manipulation of the argument rebootTime results in stack-based buffer overflow. The attack is possibl...

Important Photon OS Security Update - PHSA-2025-5.0-91-0710

Updates of 'httpd', 'Linux-PAM' packages of Photon OS have been released...

The vulnerability of the httpd-demon (/goform/saveParentControlInfo) in the Tenda AC21 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the httpd-demon /goform/saveParentControlInfo of the Tenda AC21 router’s microprogramming system is related to the execution of operations outside the buffer in memory when processing the urls parameter. Exploiting this vulnerability allows a malicious actor to cause service...

The vulnerability of the httpd-demon (/goform/SetIpMacBind) of the Tenda AC21 router software allows a attacker to execute arbitrary commands or cause service interruptions.

The vulnerability of the httpd-demon /goform/SetIpMacBind of the Tenda AC21 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Linksys E1200 安全漏洞

The Linksys E1200 is a router from Linksys USA. The Linksys E1200 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to cause the execution of arbitrary code or a denial of service...

CVE-2025-58903

An Unchecked Return Value vulnerability CWE-252 in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request...

D-Link DI-8400 安全漏洞

D-Link DI-8400 is an Internet Behavior Management router from D-Link designed for medium to large enterprise network environments, supporting 360 users with parallel access and full Gigabit port configuration. The D-Link DI-8400 suffers from a null pointer dereference vulnerability that originate...

The vulnerability of the HTTP Daemon (httpd) on the Juniper Networks Junos OS allows a attacker to cause a service failure.

The vulnerability of the HTTP Daemon httpd component of the Juniper Networks Junos OS operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...