CVE-2026-50719

The Ingenic T41 SoC boot ROM (and likely T32, T40, and A1 ) parses and executes an attacker-controlled init table from the SPL header before performing any secure boot state check or signature verification. Because the init table parser supports full-address 32-bit write operations , an attacker ...

Design/Logic Flaw

An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50...

CVE-2020-14094

In Xiaomi router R3600, ROM version1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution...