CVE-2026-7067

CVE-2026-7067 refers to a command injection in D-Link DIR-822 A_101’s udhcpd DHCP Service (file /udhcpcd/dhcpd.c, function system). The vulnerability stems from manipulating the Hostname argument, enabling remote code execution. Exploitation is possible over the network, with a publicly disclosed...

CVE-2026-7067 D-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection

A vulnerability was determined in D-Link DIR-822 A101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-7067 D-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection

A vulnerability was determined in D-Link DIR-822 A101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been...

EUVD-2026-25737

A vulnerability was determined in D-Link DIR-822 A101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-7067

A vulnerability was determined in D-Link DIR-822 A101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-40860

creationtimestamp| type| source ---|---|--- 2026-04-26 19:27:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbyr3nyr2v 2026-07-06 19:53:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyul5kuor2t 2026-07-13 22:00:05+00:00| seen|...

CVE-2026-40473

creationtimestamp| type| source ---|---|--- 2026-04-26 19:22:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbprwahy2v 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92636 2026-07-14 00:00:10+00:00| seen| https://t.me/GithubRedTeam/92636 2026-07-15...

CVE-2026-40048

creationtimestamp| type| source ---|---|--- 2026-04-26 19:16:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbeynghh22 2026-07-05 19:29:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwcpyu2zz2i 2026-07-13 22:00:07+00:00| seen|...

CVE-2026-33453

creationtimestamp| type| source ---|---|--- 2026-04-26 19:01:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgak33bo42j 2026-04-27 23:00:16+00:00| seen| Telegram/EQTkUVb0pfDYKQHtaBSXdUIdUPsDmdWPfXwKW7v0c9vw1iA 2026-04-28 03:00:06+00:00| seen|...

CVE-2026-27172

creationtimestamp| type| source ---|---|--- 2026-04-26 18:56:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgab3vjum2u 2026-07-13 22:00:11+00:00| seen| https://t.me/GithubRedTeam/92169 2026-07-14 00:00:19+00:00| seen| https://t.me/GithubRedTeam/92169 2026-07-14...

CVE-2026-7030

creationtimestamp| type| source ---|---|--- 2026-04-26 12:51:15+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkflu2lplo2w 2026-04-30 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkqb27wzhk2o...

CVE-2026-7027

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

CVE-2026-7026

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

EUVD-2026-25702

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

CVE-2026-7027 D-Link DSL-2740R Wireless Setup Section cross site scripting

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

CVE-2026-7027

A vulnerability identified in D-Link DSL-2740R EU_01.15 affects the Wireless Setup Section. The issue arises from manipulating the Wireless Network Name, causing cross-site scripting (XSS). The attack can be executed remotely, and a public exploit is available. Affected component: Wireless Setup ...

CVE-2026-7027 D-Link DSL-2740R Wireless Setup Section cross site scripting

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

nfc: llcp: add missing return after LLCP_CLOSED checks

...

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...