CVE-2026-36960

CVE-2026-36960: Cross-Site Request Forgery CSRF en la Interfaz de Administración Web ID CVE: CVE-2026-36960 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Fabricante: U-SPEED Producto: Router U-SPEED Versión de Firmware: V1.0.0 CWE: CWE-352 - Cross-Site Request Forgery CSRF Descripción El firmwar...

CVE-2026-36956

CVE-2026-36956: Cross-Site Request Forgery CSRF en la Interfaz de Administración Web ID CVE: CVE-2026-36956 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Proveedor: Shenzhen Dibit Network Equipment Co., Ltd. Producto: Dbit Router Versión de Firmware: V1.0.0 CWE: CWE-352 - Cross-Site Request...

CVE-2025-65427: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations...