CVE-2026-5842

A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted element is an unknown function of the file /api of the component Administrative API Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-5981

A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the file /goform/formAdvFirewall of the component POST Request Handler. Such manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has...

The vulnerability in the script/cgi-bin/wireless.cgi of the Wavlink WL-WN579A3 router software, which allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of the setScheduleCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router’s microprogramming software allows a hacker to circumvent existing security restrictions and execute arbitrary commands.

The vulnerability of the setScheduleCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router software lies in the lack of measures to neutralize special elements used in the operating system’s commands when processing the mode parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the CsteSystem (/cgi-bin/cstecgi.cgi) function in the Totolink A7100RU router software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the CsteSystem /cgi-bin/cstecgi.cgi function in the Totolink A7100RU router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command processing when handling the resetFlags parameter. Exploiting...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters name, qq, and time. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a...

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack when processing the name parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted GET request to the end-point /usbpaswd.asp...

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending a specially crafted GET request to the /urlrule.asp endpoint...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32910)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the UploadOpenVpnCert function in the cstecgi.cgi file, which fails to properly handle the...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data when processing the s parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET request...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the iface parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafte...

The vulnerability of the setDdnsCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router’s microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setDdnsCfg function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the provider parameter. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the setNtpCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router’s microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setNtpCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the tz parameter. Exploiting this vulnerability allows...

The vulnerability of the setFirewallType function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setFirewallType function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the firewallType parameter. Exploiting this vulnerability allows a remote...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32908)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWizardCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly...

The vulnerability of the formSetRoute() function in D-Link DIR-513 router microprogramming software allows a hacker to cause memory corruption.

The vulnerability of the formSetRoute function in D-Link DIR-513 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause memory corruption...

Tenda F456 stack buffer overflow vulnerability

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability, which stems from the formWrlsafeset function not properly handling the mitssid parameter. No detailed details about the vulnerability are currently available...

The vulnerability of the setRemoteCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setRemoteCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router software lies in the lack of measures to neutralize special elements used in the operating system’s command for processing the enable parameter. Exploiting this vulnerability allows a remote attacke...

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A3600R router’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A3600R router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary cod...

The vulnerability of D-Link DI-8003 and DI-8003G router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 and DI-8003G router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the wanping parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a...