Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

3954 matches found

EUVD
EUVD•added 2026/02/08 5:32 p.m.•10 views

EUVD-2026-5781

A flaw has been found in D-Link DWR-M921 1.1.50. This affects the function sub419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fotaurl causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

8.8CVSS5.4AI score0.03252EPSS
SaveExploits1References5
OSV
OSV•added 2026/02/08 5:15 p.m.•10 views

CVE-2026-2163

A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02. This vulnerability affects unknown code of the file ssdp.cgi. Such manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command injection. The attack may be launched remotely. The exploit is publicly availabl...

7.2CVSS5.7AI score0.0568EPSS
SaveExploits1References6
OSV
OSV•added 2026/02/08 5:15 p.m.•9 views

CVE-2026-2167

A vulnerability was detected in Totolink WA300 5.2cu.7112B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be performed from remote. The exploit is now public and m...

8.8CVSS5.6AI score0.02268EPSS
SaveExploits1References5
NVD
NVD•added 2026/02/08 5:15 p.m.•18 views

CVE-2026-2163

A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02. This vulnerability affects unknown code of the file ssdp.cgi. Such manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command injection. The attack may be launched remotely. The exploit is publicly availabl...

7.2CVSS0.0568EPSS
SaveExploits1References6
NVD
NVD•added 2026/02/08 5:15 p.m.•11 views

CVE-2026-2167

A vulnerability was detected in Totolink WA300 5.2cu.7112B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be performed from remote. The exploit is now public and m...

8.8CVSS0.02268EPSS
SaveExploits1References5
EUVD
EUVD•added 2026/02/08 5:2 p.m.•9 views

EUVD-2026-5782

A vulnerability was detected in Totolink WA300 5.2cu.7112B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be performed from remote. The exploit is now public and m...

8.8CVSS5.2AI score0.02268EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB•added 2026/02/08 5:2 p.m.•9 views

CVE-2026-2167

A vulnerability was detected in Totolink WA300 5.2cu.7112B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be performed from remote. The exploit is now public and m...

6.5CVSS6.4AI score0.02268EPSS
SaveExploits1References5Affected Software1
CVE
CVE•added 2026/02/08 5:2 p.m.•41 views

CVE-2026-2167

CVE-2026-2167 affects Totolink WA300 with firmware 5.2cu.7112_B20190227. The vulnerability lies in the setAPNetwork function in /cgi-bin/cstecgi.cgi where unfiltered Ipaddr input enables OS command injection. Exploitation can be performed remotely and public exploit exists. Multiple connected sou...

8.8CVSS6.4AI score0.02268EPSS
SaveExploits1References5Affected Software1
CVE
CVE•added 2026/02/08 4:32 p.m.•26 views

CVE-2026-2163

CVE-2026-2163: Affected product is D-Link DIR-600 up to firmware 2.15WWb02. The flaw resides in the ssdp.cgi code, where manipulation of HTTP_ST/REMOTE_ADDR/REMOTE_PORT/SERVER_ID enables remote command injection. The issue is remotely exploitable over the network; the exploit is publicly availabl...

7.2CVSS5.1AI score0.0568EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment•added 2026/02/08 4:32 p.m.•8 views

CVE-2026-2163 D-Link DIR-600 ssdp.cgi command injection

A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02. This vulnerability affects unknown code of the file ssdp.cgi. Such manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command injection. The attack may be launched remotely. The exploit is publicly availabl...

5.8CVSS5.5AI score0.0568EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB•added 2026/02/08 4:32 p.m.•26 views

CVE-2026-2163

A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02. This vulnerability affects unknown code of the file ssdp.cgi. Such manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command injection. The attack may be launched remotely. The exploit is publicly availabl...

5.8CVSS5.1AI score0.0568EPSS
SaveExploits1References6Affected Software1
NVD
NVD•added 2026/02/08 3:15 p.m.•12 views

CVE-2026-2157

A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub4175CC of the file /goform/setstaticroutetable. Such manipulation of the argument interface/destip/netmask/gateway/metric leads to os command injection. The attack may be performed from remote. The...

8.6CVSS0.03916EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment•added 2026/02/08 3:2 p.m.•5 views

CVE-2026-2157 D-Link DIR-823X set_static_route_table sub_4175CC os command injection

A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub4175CC of the file /goform/setstaticroutetable. Such manipulation of the argument interface/destip/netmask/gateway/metric leads to os command injection. The attack may be performed from remote. The...

8.6CVSS5.3AI score0.03916EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB•added 2026/02/08 3:2 p.m.•12 views

CVE-2026-2157

A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub4175CC of the file /goform/setstaticroutetable. Such manipulation of the argument interface/destip/netmask/gateway/metric leads to os command injection. The attack may be performed from remote. The...

8.6CVSS6.8AI score0.03916EPSS
SaveExploits1References5Affected Software1
CVE
CVE•added 2026/02/08 3:2 p.m.•32 views

CVE-2026-2157

D-Link DIR-823X 250416 is affected by CVE-2026-2157. The vulnerability is in the function sub_4175CC of /goform/set_static_route_table, where manipulating arguments (interface, destip, netmask, gateway, metric) enables OS command injection. Attack can be performed remotely and public exploits hav...

8.6CVSS6.8AI score0.03916EPSS
SaveExploits1References5Affected Software1
OSV
OSV•added 2026/02/08 2:16 p.m.•10 views

CVE-2026-2155

A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub4208A0 of the file /goform/setdmz of the component Configuration Handler. The manipulation of the argument dmzhost/dmzenable results in os command injection. The attack can be executed remotely...

7.2CVSS5.6AI score0.03818EPSS
SaveExploits1References6
EUVD
EUVD•added 2026/02/08 2:2 p.m.•9 views

EUVD-2026-5794

A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub4208A0 of the file /goform/setdmz of the component Configuration Handler. The manipulation of the argument dmzhost/dmzenable results in os command injection. The attack can be executed remotely...

8.6CVSS6.8AI score0.03818EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB•added 2026/02/08 2:2 p.m.•9 views

CVE-2026-2155

A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub4208A0 of the file /goform/setdmz of the component Configuration Handler. The manipulation of the argument dmzhost/dmzenable results in os command injection. The attack can be executed remotely...

8.6CVSS6.9AI score0.03818EPSS
SaveExploits1References6Affected Software1
OSV
OSV•added 2026/02/08 1:16 p.m.•10 views

CVE-2026-2152

A vulnerability was found in D-Link DIR-615 4.10. This vulnerability affects unknown code of the file advrouting.php of the component Web Configuration Interface. Performing a manipulation of the argument destip/ submask/ gw results in os command injection. The attack may be initiated remotely. T...

7.2CVSS5.6AI score0.04545EPSS
SaveExploits1References5
NVD
NVD•added 2026/02/08 1:16 p.m.•12 views

CVE-2026-2152

A vulnerability was found in D-Link DIR-615 4.10. This vulnerability affects unknown code of the file advrouting.php of the component Web Configuration Interface. Performing a manipulation of the argument destip/ submask/ gw results in os command injection. The attack may be initiated remotely. T...

8.6CVSS0.04545EPSS
SaveExploits1References5
Rows per page
Query Builder