CVE-2026-71945

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject arbitrary malicious commands into the fotaurl field, resulting in command...

KMC Controls BAC-5051E Cross-Site Request Forgery Vulnerability

KMC Controls BAC-5051E is a router product for use in building automation systems from KMC Controls, USA. A cross-site request forgery vulnerability exists in the KMC Controls BAC-5051E using firmware versions prior to E0.2.0.2. A remote attacker could exploit this vulnerability to disclose the...