EUVD-2026-102472

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-111281

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-111281

The Jooan JA-A12 IP cameras, running firmware versions 009_20171107 and 05.02.31.105 , are vulnerable to an unauthenticated remote code execution (RCE) flaw. The root cause is the use of hard-coded credentials (CWE-798). An unauthenticated attacker can send a singleCMD=SetDiagMode request to the ...

PT-2026-115272

Name of the Vulnerable Software and Affected Versions Jooan JA-A12 IP cameras version 009 20171107 Jooan JA-A12 IP cameras version 05.02.31.105 Description Unauthenticated attackers can achieve remote code execution and gain full device control by utilizing hard-coded credentials. The issue occur...

CVE-2026-109157

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2026-109157

The TRENDnet TEW-432BRP router (version 3.10B20) is susceptible to a stack-based buffer overflow in the formTcpipSetup function located in the /goform/formTcpipSetup file. The flaw is triggered by manipulating the Name argument, which can be exploited remotely . While the vendor confirms the prod...

EUVD-2026-98073

A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may ...

EUVD-2026-98154

A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has...

EUVD-2026-97976

A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about...

EUVD-2026-97981

A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely...

CVE-2026-108935

A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has...

CVE-2026-108936

A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may ...

CVE-2026-108936

A security vulnerability exists in the Edimax BR-6208AC (version 1.32) within the QoS Page component. The issue is located in an unknown part of the /goform/formQoS file, where improper input handling allows for cross-site scripting (XSS) . This vulnerability can be initiated remotely . Public ex...

CVE-2026-108936 Edimax BR-6208AC QoS Page formQoS cross site scripting

A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may ...

CVE-2026-108933

A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about...

CVE-2026-108934

A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely...

CVE-2026-108935 Edimax BR-6208AC Port Forwarding formPortFw cross site scripting

A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has...

CVE-2026-108935

The Edimax BR-6208AC (version 1.32 ) is vulnerable to a Cross-Site Scripting (XSS) flaw within the Port Forwarding Page component, specifically affecting functionality in the /goform/formPortFw file. A remote attacker can perform a manipulation to execute malicious scripts. Public exploit code is...

CVE-2026-108934

A security flaw exists in Edimax BR-6208AC version 1.32 within the HTTP Blocking Page component. The vulnerability resides in an unknown functionality of the file /goform/formUrlb , where improper input handling allows for cross-site scripting (XSS) . This flaw can be exploited remotely , and a p...

CVE-2026-108934 Edimax BR-6208AC HTTP Blocking formUrlb cross site scripting

A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely...