CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

PT-2026-80989

Name of the Vulnerable Software and Affected Versions D-Link DI-7001 MINI 5G version 19.10.31A1 Description A code execution issue exists in the msp info endpoint. An attacker can exploit the flag parameter to execute arbitrary commands on the system. Recommendations At the moment, there is no...

CVE-2025-26237

D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...

EUVD-2025-210769

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26238: Improper Control of Generation of Code

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26237: Improper Neutralization of Special Elements used in a Command

D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...

EUVD-2025-210768

D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...

PT-2026-80994

Name of the Vulnerable Software and Affected Versions D-Link DI-8100G version 17.12.20A1 Description An issue exists in the msp info endpoint where the flag parameter can be exploited to execute arbitrary code. Arbitrary code execution allows an attacker to run unauthorized commands on the system...

CVE-2025-26238

D-Link DI-8100G running version 17.12.20A1 is vulnerable to an improper control of generation of code . An attacker can exploit the flag parameter within the msp_info endpoint to achieve arbitrary code execution , allowing for the execution of unauthorized commands on the system. As of the provid...

CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2026-8265

A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function getlogfile of the file /goform/getLogFile of the component httpd. The manipulation of the argument wans.flag leads to os command injection. The attack can be initiated remotely. The exploit...

PT-2026-39564

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.06.23 Description A remote OS command injection exists in the httpd component. The issue occurs within the get log file function of the '/goform/getLogFile' endpoint, where improper manipulation of the wans.flag argumen...

EUVD-2026-10221

A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument delflag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made publ...

PT-2026-20333

Name of the Vulnerable Software and Affected Versions Wavlink WL-NU516U1 versions up to 20251208 Description A flaw exists in Wavlink WL-NU516U1 that could allow for remote command injection. The issue is located in the singlePortForwardDelete function within the /cgi-bin/firewall.cgi file...

Sangfor Operation and Maintenance Security Management System Authorization Issues Vulnerabilities

The Sangfor Operation and Maintenance Security Management System is a security management system for operations and maintenance developed by Sangfor Corporation. Versions of the Sangfor Operation and Maintenance Security Management System 3.0.12 and earlier contained an authorization issue...

CVE-2025-11335

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...

EUVD-2020-10790

Malware in sbrugna...

CVE-2025-10963

A security flaw has been discovered in Wavlink NU516U1 M16U1V240425. Affected is the function sub4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument delflag results in command injection. It is possible to launch the attack remotely. The exploit has been released to the publ...

CVE-2025-10963 Wavlink NU516U1 firewall.cgi sub_4016F0 command injection

A security flaw has been discovered in Wavlink NU516U1 M16U1V240425. Affected is the function sub4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument delflag results in command injection. It is possible to launch the attack remotely. The exploit has been released to the publ...

CVE-2025-10963 Wavlink NU516U1 firewall.cgi sub_4016F0 command injection

A security flaw has been discovered in Wavlink NU516U1 M16U1V240425. Affected is the function sub4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument delflag results in command injection. It is possible to launch the attack remotely. The exploit has been released to the publ...