CVE-2026-71938

Multiple DrayTek VigorSwitch models contain a buffer overflow in the switch_lan_gvrp function, caused by unsafe copying of the portList field into an undersized buffer. A remote attacker with valid administrative credentials for the device's web management interface can trigger the vulnerability ...

CVE-2026-71938 DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switchlangvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...

CVE-2026-71938 DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switchlangvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...

EUVD-2026-64997

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switchlangvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...

PT-2026-80972

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A buffer overflow occurs in the switch lan gvrp function due to the unsafe copying of the portList field into an undersized buffer. A remote attacker with valid administrative...

CVE-2026-43431

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix NULL pointer dereference when reading portli debugfs files Michal reported and debgged a NULL pointer dereference bug in the recently added portli debugfs files Oops is caused when there are more port registers counted ...

EUVD-2025-27578

Malicious code in bioql PyPI...

Tenda F3 Wireless Router /goform/setNAT Code Execution

The vulnerability of the /goform/setNAT module in the microprogramming software for Tenda F3 wireless routers lies in the copying of buffers without checking the size of the input data during the processing of the portList parameter. Exploiting this vulnerability allows a remote attacker to execu...

CVE-2025-57569

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT...

Tenda F3 goform/setNAT file portList parameter buffer overflow vulnerability

Tenda F3 is a 300M wireless router launched on May 15, 2015 by Shenzhen Jixiang Tenda Technology Co. Tenda F3 suffers from a buffer overflow vulnerability, which stems from the /goform/setNAT file portList parameter failing to properly validate the length size of the input data, which can be...

CVE-2025-57569

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT...

CVE-2025-57569

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT...

CVE-2025-57569

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT...

Tenda F3 security vulnerabilities

Tenda F3 is a 300M wireless router launched on May 15, 2015 by Shenzhen Jixiang Tenda Technology Co. Tenda F3 suffers from a buffer overflow vulnerability, which stems from the /goform/setNAT file portList parameter failing to properly validate the length size of the input data, which can be...

PT-2025-37072

Name of the Vulnerable Software and Affected Versions: Tenda F3 versions V12.01.01.48 multi and after Description: The Tenda F3 is susceptible to a buffer overflow condition due to the portList parameter within the /goform/setNAT API endpoint. Recommendations: At the moment, there is no informati...

CVE-2025-57569

The Tenda F3 wireless router (version V12.01.01.48_multi and after) is vulnerable to a Buffer Overflow within the microprogramming software. The root cause is the portList parameter in the /goform/setNAT module, where the application copies buffers without properly validating the length of the in...

CVE-2025-57569: Buffer Copy without Checking Size of Input

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT...