D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formLteSetup, specifically the submit-url parameter. This could lead to a stack buff...

PT-2026-21408

Name of the Vulnerable Software and Affected Versions Tenda HG9 300001138 affected versions not specified Description A flaw exists in Tenda HG9 300001138 within the GPON Configuration Endpoint. The issue relates to the manipulation of the fmgpon loid/fmgpon loid password argument in the...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formOpMode, specifically the submit-url parameter. This could lead to a stack buffer...

PT-2026-21406

Name of the Vulnerable Software and Affected Versions Tenda HG9 300001138 Description A stack-based buffer overflow exists in Tenda HG9 300001138. The issue is located in an unknown function of the file /boaform/formWlanSetup within the Wireless Configuration Endpoint component. Manipulation of t...

PT-2026-21409

Name of the Vulnerable Software and Affected Versions Tenda HG9 300001138 affected versions not specified Description A security issue exists in Tenda HG9 300001138 related to stack-based buffer overflow. The issue is located within the file /boaform/formLoopBack of the Loopback Detection...

PT-2026-21415

Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A flaw exists in the D-Link DWR-M960 router, specifically within the LTE Configuration Endpoint. The issue resides in the sub 4237AC function of the /boafrm/formLteSetup component. Manipulation of th...

Tenda HG9 security vulnerabilities

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter “pingAddr” in files like /boaform/formPing6, which may lead to a stack buffer overflow...

Tenda HG9 security vulnerabilities

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of parameters “ssid” in the file “Wireless Configuration Endpoint” of the component “boaform/formWlanSetup”, which m...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formWlEncrypt, specifically the submit-url parameter. This could lead to a stack...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formWlAc, specifically the submit-url parameter, which may lead to a stack buffer...

Tenda HG9 security vulnerabilities

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter “pingAddr” in the file/boaform/formPing of the Diagnostic Ping Endpoint component, which may lead t...

PT-2026-21419

A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. Such manipulation of the argument boundary leads to stack-based buffer overflow. The attack can be executed remotely. Th...

Tenda HG9 security vulnerabilities

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter Ethtype in the file/boaform/formLoopBack of the Loopback Detection Configuration Endpoint component...

PT-2026-21470

Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A security issue has been identified in the D-Link DWR-M960. The issue is a stack-based buffer overflow within the sub 457C5C function located in the /boafrm/formWsc file. Manipulation of the save...

CVE-2026-2884

A vulnerability was identified in D-Link DWR-M960 1.01.07. The affected element is the function sub41914C of the file /boafrm/formWanConfigSetup of the component WAN Interface Setting Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible...

CVE-2026-2886

The CVE-2026-2886 entry concerns Tenda A21 firmware 1.0.0.0, where the function SetOnlineDevName in /goform/SetOnlineDevName is vulnerable. Manipulating the devName argument causes a stack-based buffer overflow, enabling remote attack. The description notes that the exploit is publicly available....

CVE-2026-2886

A weakness has been identified in Tenda A21 1.0.0.0. This affects the function setdevicename of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to t...

CVE-2026-2886 Tenda A21 SetOnlineDevName set_device_name stack-based overflow

A weakness has been identified in Tenda A21 1.0.0.0. This affects the function setdevicename of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to t...

CVE-2026-2886 Tenda A21 SetOnlineDevName set_device_name stack-based overflow

A weakness has been identified in Tenda A21 1.0.0.0. This affects the function setdevicename of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to t...

CVE-2026-2885

The CVE affects D-Link DWR-M960 (version 1.01.07). The vulnerability is a stack-based buffer overflow in the function sub_469104 within /boafrm/formIpv6Setup, triggered by manipulating the submit-url argument. Exploitation can be performed remotely, and public exploits exist. CVSS data indicate h...