CVE-2025-34152

⚠️ CVE-2025-34152 – RCE en el repetidor Wi-Fi M300 de Shenzhen Aitemi 🚨 Resumen El repetidor Wi-Fi M300 de Shenzhen Aitemi está afectado por una ejecución remota de código RCE no autenticada. No requiere inicio de sesión No reinicia el dispositivo Puede explotarse de forma remota 🛠 Versiones...

CVE-2025-56311

CVE-2025-56311：安全公告 – FD602GW-DX-R410 路由器重启功能中的 CSRF 漏洞 FD602GW-DX-R410 光纤路由器管理界面（固件版本 V2.2.14）中跨站请求伪造（CSRF）漏洞的概念验证与安全公告。本公告概述了影响、攻击向量及修复建议。 fd602gw-dx-r410-csrf-advisory FD602GW-DX-R410 路由器中的 CSRF 漏洞允许远程攻击者在管理员已认证的情况下，通过向 /boaform/admin/formReboot 发送精心构造的 POST 请求重启设备。 概述 在 FD602GW-DX-R410 光纤路由器的...

CVE-2026-8067

An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...

CVE-2026-8067

An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...

PT-2026-92022

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

CVE-2026-51767

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset pairing state and reboot the device via sending a crafted MQTT message to the csbroker component...

CVE-2026-51767

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset pairing state and reboot the device via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69204

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reboot the system via sending a crafted MQTT message to the csbroker component...

CVE-2026-51767

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset pairing state and reboot the device via sending a crafted MQTT message to the csbroker component...

CVE-2026-51767

The TOTOLINK T6 wireless dual-band Mesh router (version 4.1.5cu.748_B20211015 ) is vulnerable to incorrect access control within the recvClearPairCfg function. This flaw allows unauthenticated attackers to send a specially crafted MQTT message to the cs_broker component. Successful exploitation c...

CVE-2026-51738

Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset the device configuration and reboot the device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68743

Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset the device configuration and reboot the device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51738

The TOTOLINK T6 wireless dual-band Mesh router (specifically version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw in the LoadDefSettings function. An unauthenticated attacker can exploit this by sending a specially crafted POST request to the /cgi-bin/cstecgi.cgi endp...

CVE-2026-77977

Ebyte NE2-D11 is an industrial gateway whose vendor configuration utility lacks authentication before permitting disruptive administrative actions (reboot or factory reset) when default credentials remain configured. An unauthenticated attacker on the adjacent network can trigger these actions, c...

CVE-2026-77977 Ebyte NA111-M Missing Authentication for Critical Function

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

CVE-2026-75618

Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker on the local network can send specially crafted requests that cause the service to dereference an invalid pointer, resulting in a service crash and device reboot. Successful exploitation can disru...

CVE-2026-75618

TP-Link Tapo C100/C101 V5 contains a null pointer dereference in its RTSP service . An attacker on the adjacent (local) network can send specially crafted requests to trigger the invalid pointer dereference, causing a service crash and device reboot . The impact is a temporary denial-of-service ,...

CVE-2025-41769

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code...

CVE-2025-41769 Unauthenticated Buffer Overflow in PROFINET Service

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code...

CVE-2025-41769

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code...