CVE-2026-15481

The CVE-2026-15481 affects Trendnet TEW-635BRM firmware up to 1.00.03, specifically the IPoA WAN Connection Setup component’s /sbin/rc function ipoa_test. A manipulation of the ipoa_ipaddr argument enables remote command injection, with network access as the attack vector and no user interaction ...

MINI-MQWW-585R-RF7G

Bulletin has no description...

MINI-MQ2R-CFHP-R59M

Bulletin has no description...

MINI-PX4F-MJCM-JQM2

Bulletin has no description...

MINI-84WR-MC33-FHH8

Bulletin has no description...

MINI-PHF5-J74J-2VQV

Bulletin has no description...

MINI-66FP-PX28-Q95M

Bulletin has no description...

MINI-Q493-9C6G-V83G

Bulletin has no description...

MINI-863Q-F984-5MQQ

Bulletin has no description...

MINI-M23W-W8JF-9GH8

Bulletin has no description...

MINI-V5VR-XM9V-R88X

Bulletin has no description...

MINI-48WF-7V29-X3W2

Bulletin has no description...

MINI-GFG2-VM3H-2H3H

Bulletin has no description...

MINI-2RC3-G385-9PFR

Bulletin has no description...

MINI-M8CW-8R22-PVG9

Bulletin has no description...

MINI-689Q-2RXP-32R6

Bulletin has no description...

CVE-2026-57157

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. FreeRDP server implementations with the MS-RDPECAM camera device enumerator channel enabled are vulnerable to an out-of-bounds heap read. A malicious RDP client can exploit this by manipulating the DeviceName a...

CVE-2026-57157

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server implementations with the MS-RDPECAM camera device enumerator channel enabled scan attacker-supplied DeviceName and VirtualChannelName fields for a NUL terminator in...

UBUNTU-CVE-2026-57157

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server implementations with the MS-RDPECAM camera device enumerator channel enabled scan attacker-supplied DeviceName and VirtualChannelName fields for a NUL terminator in...

CVE-2026-57157

FreeRDP (server implementations with the MS-RDPECAM camera device enumerator channel enabled) is affected prior to 3.28.0. Attackers can cause a 1- to 2-byte out-of-bounds heap read by scanning attacker-supplied DeviceName and VirtualChannelName fields and dereferencing beyond the scanned bound i...