Lucene search
+L

10 matches found

NVD
NVD
•added 2026/03/26 9:16 a.m.•16 views

CVE-2026-4861

A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available t...

9CVSS0.01058EPSS
SaveExploits2References4
CVE
CVE
•added 2026/03/26 8:18 a.m.•43 views

CVE-2026-4861

CVE-2026-4861 affects Wavlink WL-NU516U1 (260227) via the /cgi-bin/nas.cgi, function ftext. The issue arises from manipulating the Content-Length argument, triggering a stack-based buffer overflow. Exploitation is remote and public, with a proof-of-concept in CVSS data. Impact indicators show hig...

9CVSS8.2AI score0.01058EPSS
SaveExploits2References4Affected Software1
attackerkb
attackerkb
•added 2026/03/26 8:18 a.m.•6 views

CVE-2026-4861

A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available t...

9CVSS6.5AI score0.01058EPSS
SaveExploits2References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/26 8:18 a.m.•5 views

CVE-2026-4861 Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow

A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available t...

9CVSS8AI score0.01058EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2026/03/26 8:18 a.m.•49 views

CVE-2026-4861 Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow

A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available t...

9CVSS0.01058EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/26 12:00 a.m.•1 views

CVE-2026-4861: Stack-based Buffer Overflow

A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available t...

9CVSS8.2AI score0.01058EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2026/03/26 12:00 a.m.•24 views

PT-2026-28654

Name of the Vulnerable Software and Affected Versions Wavlink WL-NU516U1 version 260227 Description A stack-based buffer overflow exists in the ftext function of the /cgi-bin/nas.cgi file in Wavlink WL-NU516U1. The issue is triggered by manipulating the Content-Length argument, allowing for remot...

9CVSS6.1AI score0.01058EPSS
SaveExploits2References8
BDU FSTEC
BDU FSTEC
•added 2024/05/02 12:00 a.m.•12 views

The vulnerability of the ftext() function in the upload_firmware.cgi script of the D-Link DIR-822+ wireless router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the ftext function in the uploadfirmware.cgi script of the D-Link DIR-822+ wireless router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s command for processing the UPLOADFILENAME parameter...

10CVSS5.9AI score0.19893EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2024/04/26 6:15 p.m.•13 views

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

9.8CVSS6AI score0.19893EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•1 views

CVE-2024-33344: Improper Neutralization of Special Elements used in a Command

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

9.8CVSS6.3AI score0.19893EPSS
SaveExploits1References2
Rows per page
Query Builder