Lucene search
+L

7 matches found

NVD
NVD
•added 2026/08/24 7:17 p.m.•19 views

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

8.5CVSS0.0228EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/24 6:26 p.m.•20 views

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

8.5CVSS5.8AI score0.0228EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/24 6:26 p.m.•77 views

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

8.5CVSS6.1AI score0.0228EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•10 views

CVE-2026-78541: Improper Neutralization of Special Elements used in an OS Command

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

8.5CVSS6.1AI score0.0228EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•27 views

PT-2026-80993

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

8.5CVSS5.8AI score0.0228EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•8 views

EUVD-2025-175866

Malicious code in try-data-signal-cloud-report npm...

6.6AI score
SaveExploits0
Palo Alto Networks
Palo Alto Networks
•added 2016/08/12 10:00 p.m.•7 views

WildFire Cross-Site Scripting Vulnerability

A Palo Alto Networks firewall displaying a WildFire cloud integrated report is susceptible to a cross-site scripting condition Ref WTC-3355. A sample analyzed by the WildFire cloud could trigger a cross-site scripting attack against a firewall administrator who is displaying a WildFire report. Th...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder