CVE-2026-36607

Mercusys AC12G EU V1 router with firmware AC12GEUV1200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint code=10, which lacks the rate limiting applied to the login endpoint code=7. An attacker on the adjacent network can attempt unlimited passwords without...

D-Link DSL-2740R 跨站脚本漏洞

The D-Link DSL-2740R is a high-performance ADSL router from D-Link Corporation. The D-Link DSL-2740R EU01.15 version has a cross-site scripting vulnerability. This vulnerability stems from improper handling of the Wireless Network Name parameter by the Wireless Setup Section component, which may...

TP-LINK Archer AX10 安全漏洞

The TP-LINK Archer AX10 is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Archer AX10EUV1.2230220 version, which originates from a buffer overflow vulnerability contained in function FUN131e8 - 0x132B4...

TP-Link TL-WPA7510 缓冲区错误漏洞

The TP-LINK TL-WPA7510 is a WIFI extender from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WPA7510 EUV2190125 version, which stems from the presence of a stack overflow issue...

VulnCheck KEV: CVE-2021-41653

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a crafted payload in an IP address input field...