EUVD-2026-54833

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configurati...

EUVD-2026-54835

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...

CVE-2026-71987

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands and...

CVE-2026-71992

MSI Radix AXE6600 router firmware v781521 contains a command injection flaw in the macfilter function that allows remote attackers to execute arbitrary commands with root privileges on the underlying system. The vulnerability is triggered via the macfilter component and is exploitable over the ne...

CVE-2026-71988 MSI Radix AXE6600 v781521 Command Injection via portFw function

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands an...

CVE-2026-71987

CVE-2026-71987 affects MSI Radix AXE6600 firmware v781521. A command injection flaw exists in the alg function that allows remote attackers to execute arbitrary commands with root privileges on the device. The vulnerability is exploitable over the network with low attack complexity and no authent...

CVE-2026-71983

CVE-2026-71983 affects the MSI Radix AXE6600 router (firmware v781521). The vulnerability is a command injection in the wps.cgi interface, exploitable via unsanitized input in the pin2g, pin5g, or pin6g parameters. Successful exploitation could allow an attacker to execute arbitrary commands with...

CVE-2026-71948

Affected product/versions: D-Link DWR-M961, hardware version C1, firmware before 1.1.5_C1_202607071108. Vulnerability: command injection via the /boafrm/formDebugDiagnosticRun interface; remote attacker can inject arbitrary commands into the host field, leading to root-level command execution. Im...

CVE-2026-49005

The root password hash of the device can be obtained through unencrypted information in the firmware...

Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware

C...

Exploit for CVE-2026-65058

Trezor Safe Calldata Confirmation-Binding Bypass — CVE-2026-65...

CVE-2026-64573 Bluetooth: qca: fix NVM tag length underflow in TLV parser

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NVM tag length underflow in TLV parser In the TLVTYPENVM branch of qcatlvcheckdata the tag loop bound is "while idx length - sizeofstruct tlvtypenvm". "length" is a signed int from the firmware TLV header and...

PT-2026-67634

Name of the Vulnerable Software and Affected Versions Zyxel WAX650S versions prior to 7.10ABRM.4C0 Description An improper authentication issue exists in the "social login.cgi" CGI program. This flaw allows an attacker connected to the WLAN to bypass captive portal authentication. Recommendations...

Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware

AVERTISSEMENT ÉTHIQUE - LECTURE OBLIGATOIRE Ce docume...

Brother MFC-9970CDW Printers Cross-site Scripting (CVE-2013-2670)

Cross-site scripting XSS vulnerability in the Brother MFC-9970CDW printer with firmware G 1.03 and L 1.10 allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name QUERYSTRING to admin/adminmain.html, a different vulnerability than CVE-2013-2507 and...

CVE-2026-56428

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorizedkeys file for the root user. An attacker in possession of the...

CVE-2026-56428

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorizedkeys file for the root user. An attacker in possession of the...

EUVD-2026-51108

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorizedkeys file for the root user. An attacker in possession of the...

CVE-2026-22622

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...

EUVD-2026-51077

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...