CVE-2026-36956

CVE-2026-36956：Web 管理界面中的跨站请求伪造（CSRF） CVE ID： CVE-2026-36956 日期： 2026-04-29 发现者： Kirubel Solomne 厂商： 深圳市迪比特网络设备有限公司 产品： Dbit 路由器 固件版本： V1.0.0 CWE： CWE-352 - 跨站请求伪造（CSRF） 描述 Dbit 路由器固件 V1.0.0 未在管理 API 端点上实施 CSRF 防护机制，例如反 CSRF 令牌或严格的 Origin/Referer 校验。攻击者可以构造一个恶意网页，向配置端点发送伪造的 HTTP...

CVE-2026-36957

CVE-2026-36957：Boa Web 服务器因 HTTP 洪泛攻击导致拒绝服务 CVE ID： CVE-2026-36957 日期： 2026-04-29 发现者： Kirubel Solomne 厂商： 深圳市迪比特网络设备有限公司 产品： Dbit 路由器 固件版本： V1.0.0 CWE： CWE-400 - 未受控的资源消耗 描述 Dbit 路由器固件 V1.0.0 存在通过 Boa Web 服务器 URI 处理器导致的拒绝服务漏洞。攻击者向不存在的 URI 发送大量 HTTP GET...

Dbit N300 T1 Pro 资源管理错误漏洞

The Dbit N300 T1 Pro is a wireless router device produced by the Dbit company. The Dbit N300 T1 Pro V1.0.0 version has a resource management vulnerability. This vulnerability stems from a denial-of-service attack in the boa Web server URI handler, which could allow attackers to exhaust system...

CVE-2026-36957

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent URIs, an attacker can exhaust critical system resources, including file descriptors and memory...

CVE-2026-36956

The affected component is the web management interface of the Dbit N300 T1 Pro wireless router (V1.0.0). The issue is a CSRF vulnerability due to missing anti-CSRF tokens and insufficient Origin/Referer validation on administrative endpoints such as /api/setWlan. If an authenticated administrator...

EUVD-2026-26377

A Cross-Site Request Forgery CSRF vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanisms such as anti-CSRF tokens or strict Origin/Referer validation for administrative API endpoints. An...

CVE-2026-36956

A Cross-Site Request Forgery CSRF vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanisms such as anti-CSRF tokens or strict Origin/Referer validation for administrative API endpoints. An...

Exploit for CVE-2026-36957

CVE-2026-36957: Denial of Service via HTTP Flood on Boa Web Se...

CVE-2025-65427

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations...

PT-2025-51736

Name of the Vulnerable Software and Affected Versions Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router version V1.0.0 Description The Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router version V1.0.0 does not implement rate limiting on the /api/login endpoint. This allows attackers to attempt...