CVE-2026-4905

A vulnerability was found in Tenda AC5 15.03.06.47. Impacted is the function formWifiWpsOOB of the file /goform/WifiWpsOOB of the component POST Request Handler. Performing a manipulation of the argument index results in stack-based buffer overflow. Remote exploitation of the attack is possible...

CVE-2026-4904 Tenda AC5 POST Request setcfm formSetCfm stack-based overflow

A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit...

CVE-2026-4903

CVE-2026-4903 affects the Tenda AC5 (firmware 15.03.06.47). The vulnerability is in the POST /goform/QuickIndex handler function formQuickIndex, where manipulating the PPPOEPassword argument triggers a stack-based buffer overflow. The attack can be mounted remotely, with the exploit published and...

CVE-2026-4903 Tenda AC5 POST Request QuickIndex formQuickIndex memory corruption

A flaw has been found in Tenda AC5 15.03.06.47. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. This manipulation of the argument PPPOEPassword causes stack-based buffer overflow. The attack may be initiated remotely. Th...

CVE-2026-4902 Tenda AC5 POST Request addressNat fromAddressNat memory corruption

A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is n...

CVE-2025-12805

creationtimestamp| type| source ---|---|--- 2026-03-26 22:21:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhynbhwrsw2j 2026-03-26 22:22:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyncg4j2v2s 2026-03-26 22:48:16+00:00| seen|...

CVE-2026-33542

creationtimestamp| type| source ---|---|--- 2026-03-26 22:08:31+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-p8mm-23gg-jc9r 2026-03-27 00:18:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhytrl4m5d23 2026-03-31 17:00:00+00:00| seen|...

CVE-2026-33895

creationtimestamp| type| source ---|---|--- 2026-03-26 22:04:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q67f-28xg-22rw 2026-03-27 21:39:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33fes6be2c 2026-03-27 23:27:55+00:00| seen|...

CVE-2026-33894

creationtimestamp| type| source ---|---|--- 2026-03-26 22:02:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-ppp5-5v6c-4jwp 2026-03-27 21:39:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33fsgfdk2j 2026-03-27 23:27:55+00:00| seen|...

CVE-2026-32501

creationtimestamp| type| source ---|---|--- 2026-03-26 21:36:00+00:00| seen| Telegram/ZlwyyZCGobz0DL3VkciBBst8GvSl0UBVZV3ZV9Oa2yUbLdM 2026-04-07 15:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miw3uo5ff72c...

CVE-2026-32485

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:36+00:00| seen| Telegram/jNlDBTackbRa-OzLBD4eltRa4dE7lS0-uVg4cHfoz-Hg 2026-04-07 05:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miv2dr5xbv2w...

CVE-2026-31921

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:15+00:00| seen| Telegram/zW9IZrd6TGtn6tlC-J0V1NpAAnhFTvKo2N1YPzc1YC33cco 2026-03-26 21:35:36+00:00| seen| Telegram/jNlDBTackbRa-OzLBD4eltRa4dE7lS0-uVg4cHfoz-Hg 2026-04-08 01:30:07+00:00| seen|...

CVE-2026-25317

creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:32+00:00| seen| Telegram/jvhOKmzqiPeYBdBxVFESt3SUAdqySxNGUXLiFxkgoqjLWk 2026-04-09 08:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2fdhm5md2e...

CVE-2026-23977

creationtimestamp| type| source ---|---|--- 2026-03-26 21:33:43+00:00| published-proof-of-concept| Telegram/fY4No4paH3d0dcxL7eHJzi9nTjzGU82ddBovSTYQV2kvbQ 2026-04-10 01:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj46dfqtn32u...

CVE-2026-33148

creationtimestamp| type| source ---|---|--- 2026-03-26 20:49:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyi4fsfsn2o...

CVE-2026-33622 A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate...

CVE-2026-33622

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate...

GO-2026-4713 File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely in github.com/filebrowser/filebrowser

File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely in github.com/filebrowser/filebrowser...

CVE-2026-3121

creationtimestamp| type| source ---|---|--- 2026-03-26 20:12:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfzxxcfd2d...

CVE-2026-33149

creationtimestamp| type| source ---|---|--- 2026-03-26 20:09:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfvikwi32i 2026-03-26 21:36:40+00:00| seen| Telegram/gdbQBvnuOgX0zlyJL9kfjxoCoTp9WBTGn5-zeTA4spKkwcA 2026-03-26 22:00:46+00:00| seen|...