Lucene search
K

145190 matches found

NVD
NVD
added 2026/05/24 11:16 p.m.8 views

CVE-2026-9402

A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argument...

6.5CVSS0.01409EPSS
Exploits0References4
NVD
NVD
added 2026/05/24 11:16 p.m.11 views

CVE-2026-9400

A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a manipulation of the argument subdir can lead to command injection. It is possible to launch the attack remotely. The...

6.5CVSS0.01409EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/24 11:15 p.m.9 views

EUVD-2026-31608

A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument enable results in os command injection. Remote exploitation o...

10CVSS7AI score0.01254EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/05/24 11:15 p.m.20 views

CVE-2026-9405 Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection

A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument enable results in os command injection. Remote exploitation o...

10CVSS0.01254EPSS
Exploits0References5
CVE
CVE
added 2026/05/24 11:15 p.m.10 views

CVE-2026-9405

Totolink A8000RU Web Management Interface (7.1cu.643_b20200521) is affected. The vulnerability lies in /cgi-bin/cstecgi.cgi, function setGameSpeedCfg, where manipulating the enable argument leads to OS command injection. Remote exploitation is possible and exploits are publicly available. No patc...

10CVSS7AI score0.01254EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/24 11:15 p.m.5 views

CVE-2026-9405

A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument enable results in os command injection. Remote exploitation o...

10CVSS7AI score0.01254EPSS
Exploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/24 11:0 p.m.9 views

CVE-2026-9404

A vulnerability was identified in Totolink A8000RU 7.1cu.643b20200521. This affects the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument provider leads to os command injection. The attack may be launched remotely. Th...

10CVSS5.7AI score0.01254EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/24 11:0 p.m.8 views

CVE-2026-9404 Totolink A8000RU Web Management cstecgi.cgi setDdnsCfg os command injection

A vulnerability was identified in Totolink A8000RU 7.1cu.643b20200521. This affects the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument provider leads to os command injection. The attack may be launched remotely. Th...

10CVSS5.7AI score0.01254EPSS
Exploits0References5
CVE
CVE
added 2026/05/24 11:0 p.m.11 views

CVE-2026-9404

CVE-2026-9404 affects Totolink A8000RU Web Management Interface. The vulnerable component is the file /cgi-bin/cstecgi.cgi (function: setDdnsCfg). The issue arises from manipulation of the argument provider, leading to OS command injection . The vulnerability may be exploited remotely, and public...

10CVSS7.1AI score0.01254EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/05/24 11:0 p.m.11 views

CVE-2026-9404 Totolink A8000RU Web Management cstecgi.cgi setDdnsCfg os command injection

A vulnerability was identified in Totolink A8000RU 7.1cu.643b20200521. This affects the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument provider leads to os command injection. The attack may be launched remotely. Th...

10CVSS0.01254EPSS
Exploits0References5
EUVD
EUVD
added 2026/05/24 11:0 p.m.10 views

EUVD-2026-31607

A vulnerability was identified in Totolink A8000RU 7.1cu.643b20200521. This affects the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument provider leads to os command injection. The attack may be launched remotely. Th...

10CVSS7.1AI score0.01254EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/24 10:30 p.m.10 views

CVE-2026-9402

A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argument...

6.5CVSS5.6AI score0.01409EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/05/24 10:30 p.m.8 views

CVE-2026-9402

The CVE-2026-9402 entry concerns Edimax BR-6675nD firmware 1.12. The vulnerability is in the POST Request Handler’s formWlanMP function (/goform/formWlanMP). Manipulating parameters such as ateFunc, ateGain, ateRate, ateChan, ateTxCount, various e2pTx/e2pTxPower and readE2P fields results in comm...

6.5CVSS6.4AI score0.01409EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/24 10:30 p.m.6 views

CVE-2026-9402 Edimax BR-6675nD POST Request formWlanMP command injection

A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argument...

6.5CVSS6.4AI score0.01409EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/24 10:30 p.m.9 views

EUVD-2026-31602

A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argument...

6.5CVSS6.4AI score0.01409EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/24 10:30 p.m.11 views

CVE-2026-9402 Edimax BR-6675nD POST Request formWlanMP command injection

A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argument...

6.5CVSS0.01409EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/24 10:0 p.m.8 views

CVE-2026-9400

A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a manipulation of the argument subdir can lead to command injection. It is possible to launch the attack remotely. The...

6.5CVSS5.6AI score0.01409EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/05/24 10:0 p.m.11 views

CVE-2026-9400

Edimax BR-6675nD (firmware 1.12) is affected by a command-injection in the POST Request Handler’s formUSBStorage function (/goform/formUSBStorage). By manipulating the sub_dir parameter, an attacker can execute arbitrary commands remotely. The CVE description consistently notes a remote attack po...

6.5CVSS6.4AI score0.01409EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/24 10:0 p.m.10 views

CVE-2026-9400 Edimax BR-6675nD POST Request formUSBStorage command injection

A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a manipulation of the argument subdir can lead to command injection. It is possible to launch the attack remotely. The...

6.5CVSS0.01409EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/24 10:0 p.m.7 views

CVE-2026-9400 Edimax BR-6675nD POST Request formUSBStorage command injection

A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a manipulation of the argument subdir can lead to command injection. It is possible to launch the attack remotely. The...

6.5CVSS6.4AI score0.01409EPSS
Exploits0References4
Rows per page
Query Builder