4 matches found
CVE-2026-36540
The Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skk_set.cgi endpoint. The root cause is that the password and new_pwd_confirm POST parameters are passed directly to the underlying OS shell without proper sanitization. An attacker can ex...
CVE-2025-50650
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routesstatic parameter in the /router.asp endpoint...
PT-2026-31376
Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to insufficient input size validation in the routes static parameter of the '/router.asp' API endpoint. Recommendations Update to a newer version that addresses this...
