CVE-2026-4163

A vulnerability was detected in Wavlink WL-WN579A3 220323. This issue affects the function SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The exploit...

WAVLINK WL-WN579A3 命令注入漏洞

WAVLINK WL-WN579A3 is a high-performance dual-band wireless network card developed by WAVLINK Corporation. The WAVLINK WL-WN579A3 220323 version has a command injection vulnerability. This vulnerability arises from improper handling of parameters for the function setName/GuestWifi in the...

Debian: Security Advisory (DLA-4501-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2026-1547 wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fixes: Wireshark ...

OESA-2026-1548 wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fixes: Wireshark ...

CVE-2026-4164

A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is the function DeleteMaclist/SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Executing a manipulation can lead to command injection. It is possible to launch the attack remotely. The exploit h...

CVE-2026-4164

CVE-2026-4164 affects Wavlink WL-WN578W2 (firmware version 221110) with a flaw in POST Request Handler, specifically the /cgi-bin/wireless.cgi functions Delete_Mac_list, SetName, and GuestWifi. The underlying issue enables a remote command injection, allowing an attacker with network access and n...

CVE-2026-4164 Wavlink WL-WN578W2 POST Request wireless.cgi GuestWifi command injection

A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is the function DeleteMaclist/SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Executing a manipulation can lead to command injection. It is possible to launch the attack remotely. The exploit h...

[SECURITY] [DLA 4501-1] wireless-regdb new upstream version

Debian LTS Advisory DLA-4501-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 14, 2026 https://wiki.debian.org/LTS Package : wireless-regdb Version : 2026.02.04-1deb11u1 This update includes the changes in wireless-regdb 2026.02.04, reflecting changes to radi...

Debian dla-4501 : wireless-regdb - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4501 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4501-1 [email protected] https://www.debian.org/lts/security/ B...

DLA-4501-1 wireless-regdb - security update

Bulletin has no description...

CVE-2026-4043 Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflow

A security vulnerability has been detected in Tenda i12 1.0.0.62204. The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-4007

A vulnerability was detected in Tenda W3 1.0.0.32204. This vulnerability affects unknown code of the file /goform/wifiSSIDget of the component POST Parameter Handler. Performing a manipulation of the argument index results in stack-based buffer overflow. It is possible to initiate the attack...

TP-Link TL-MR6400 安全漏洞

The TP-Link TL-MR6400 is a wireless router produced by TP-Link Corporation. The TP-Link TL-MR6400 v5.3 version has a security vulnerability, which stems from insufficient data cleaning in the Telnet CLI. This vulnerability may lead to command injection attacks...

CVE-2025-70251

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanGuestSetup...

SAPIDO RB-1732 安全漏洞

SAPIDO RB-1732 is a wireless router produced by SAPIDO Company in Taiwan, China. The SAPIDO RB-1732 V2.0.43 version has a security vulnerability. This vulnerability stems from the formSysCmd endpoint, which allows remote command execution, potentially enabling unverified attackers to execute...

The vulnerability of the cfg80211_check_and_end_cac() function in the net/wireless/reg.c module, which supports wireless communication in the Linux kernel, allows a hacker to trigger a service failure.

The vulnerability of the cfg80211checkandendcac function in the net/wireless/reg.c module, which supports wireless communication in Linux kernels, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-37499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference issue exists in the find network function within the rtl8723bs staging driver. The variable pwlan can be NULL when passed into the rtw free network nolock function,...

The vulnerability of the ath11k_qmi_m3_load() function in the drivers/net/wireless/ath/ath11k/qmi.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath11kqmim3load function in the drivers/net/wireless/ath/ath11k/qmi.c module of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacke...

New Attack Against Wi-Fi

It's called AirSnitch: Unlike previous Wi-Fi attacks, AirSnitch exploits core features in Layers 1 and 2 and the failure to bind and synchronize a client across these and higher layers, other nodes, and other network names such as SSIDs Service Set Identifiers. This cross-layer identity...