CVE-2026-10174

creationtimestamp| type| source ---|---|--- 2026-05-31 13:04:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn5mvtqx5b2v...

CVE-2026-40963

creationtimestamp| type| source ---|---|--- 2026-05-31 12:14:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5k45qeba2b...

CVE-2026-10170

creationtimestamp| type| source ---|---|--- 2026-05-31 09:23:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn5aksk7xd2a...

CVE-2026-10172

creationtimestamp| type| source ---|---|--- 2026-05-31 09:03:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn57gyicr627...

CVE-2026-10169

creationtimestamp| type| source ---|---|--- 2026-05-31 08:54:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn56wehrw32g...

CVE-2026-10157

creationtimestamp| type| source ---|---|--- 2026-05-31 05:12:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4sjat37p2g 2026-06-01 15:15:57+00:00| published-proof-of-concept| https://t.me/bdufstecru/3210...

CVE-2024-29876

creationtimestamp| type| source ---|---|--- 2026-05-31 05:06:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mn4s6u5cyw2m...

CVE-2026-10166

A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection. The attack is possible to be carried out remotely...

CVE-2026-8382

The Advanced Custom Fields ACF® plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrit...

CVE-2026-10163

A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. The manipulation of the argument UserName/Password leads to buffer overflow. Remote exploitation of the attack is...

CVE-2026-10161

creationtimestamp| type| source ---|---|--- 2026-05-31 04:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4ojejwhd2p 2026-05-31 05:07:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4sa7hfif2p 2026-05-31 06:55:37+00:00| seen|...

EUVD-2026-33486

A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection. The attack is possible to be carried out remotely...

CVE-2026-10166

Edimax BR-6478AC (firmware 1.23) is affected by a vulnerability in the POST Request Handler, specifically the function formWlbasic in /goform/formWlbasic. The issue arises from manipulating the argument rootAPmac, enabling command injection. The vulnerability is exploitable remotely and has been ...

CVE-2026-10166

A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection. The attack is possible to be carried out remotely...

CVE-2026-10166 Edimax BR-6478AC POST Request formWlbasic command injection

A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection. The attack is possible to be carried out remotely...

CVE-2026-10158

creationtimestamp| type| source ---|---|--- 2026-05-31 03:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4l5oejit27 2026-05-31 04:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4rfe27k62n...

CVE-2026-10165

The CVE-2026-10165 vulnerability affects Edimax BR-6478AC (firmware 1.23) in the POST Request Handler, specifically the formWanTcpipSetup function. Manipulation of the pppUserName argument causes a stack-based buffer overflow, with remote exploitation possible and a publicly available exploit. No...

CVE-2026-10165 Edimax BR-6478AC POST Request formWanTcpipSetup stack-based overflow

A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack may be...

CVE-2026-10165 Edimax BR-6478AC POST Request formWanTcpipSetup stack-based overflow

A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack may be...

CVE-2026-10164

A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. The manipulation of the argument ShareName/SelectName results in buffer overflow. The attack can be executed remotely. The exploit ha...