CVE-2026-2905

CVE-2026-2905 affects Tenda HG9 (model/version 300001138) with a stack-based buffer overflow in the Wireless Configuration Endpoint, specifically in /boaform/formWlanSetup when the ssid argument is manipulated. The vulnerability can be triggered remotely over the network with low attack complexit...

PT-2026-21408

Name of the Vulnerable Software and Affected Versions Tenda HG9 300001138 affected versions not specified Description A flaw exists in Tenda HG9 300001138 within the GPON Configuration Endpoint. The issue relates to the manipulation of the fmgpon loid/fmgpon loid password argument in the...

D-Link DWR-M960 安全漏洞

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formWlAc, specifically the submit-url parameter, which may lead to a stack buffer...

Tenda HG9 安全漏洞

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of parameters “ssid” in the file “Wireless Configuration Endpoint” of the component “boaform/formWlanSetup”, which m...

PT-2026-21419

A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. Such manipulation of the argument boundary leads to stack-based buffer overflow. The attack can be executed remotely. Th...

PT-2026-21470

Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A security issue has been identified in the D-Link DWR-M960. The issue is a stack-based buffer overflow within the sub 457C5C function located in the /boafrm/formWsc file. Manipulation of the save...

Tenda HG9 安全漏洞

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter “pingAddr” in the file/boaform/formPing of the Diagnostic Ping Endpoint component, which may lead t...

PT-2026-21415

Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A flaw exists in the D-Link DWR-M960 router, specifically within the LTE Configuration Endpoint. The issue resides in the sub 4237AC function of the /boafrm/formLteSetup component. Manipulation of th...

Tenda HG9 安全漏洞

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter “pingAddr” in files like /boaform/formPing6, which may lead to a stack buffer overflow...

Tenda HG9 安全漏洞

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter Ethtype in the file/boaform/formLoopBack of the Loopback Detection Configuration Endpoint component...

D-Link DWR-M960 安全漏洞

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formWlEncrypt, specifically the submit-url parameter. This could lead to a stack...

Tenda A18 安全漏洞

The Tenda A18 is a AC1200 dual-band Wi-Fi repeater produced by the Chinese company Tenda. Version 15.13.07.13 of the Tenda A18 contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter “boundary” in the file /cgi-bin/UploadCfg, which may lead to a stack...

D-Link DWR-M960 安全漏洞

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formOpMode, specifically the submit-url parameter. This could lead to a stack buffer...

D-Link DWR-M960 安全漏洞

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formLteSetup, specifically the submit-url parameter. This could lead to a stack buff...

PT-2026-21409

Name of the Vulnerable Software and Affected Versions Tenda HG9 300001138 affected versions not specified Description A security issue exists in Tenda HG9 300001138 related to stack-based buffer overflow. The issue is located within the file /boaform/formLoopBack of the Loopback Detection...

Tenda HG9 安全漏洞

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter “sambaCap” in the file/boaform/formSamba of the Samba Configuration Endpoint component, which may...

PT-2026-21406

Name of the Vulnerable Software and Affected Versions Tenda HG9 300001138 Description A stack-based buffer overflow exists in Tenda HG9 300001138. The issue is located in an unknown function of the file /boaform/formWlanSetup within the Wireless Configuration Endpoint component. Manipulation of t...

CVE-2026-2884

A vulnerability was identified in D-Link DWR-M960 1.01.07. The affected element is the function sub41914C of the file /boafrm/formWanConfigSetup of the component WAN Interface Setting Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible...

CVE-2026-2886

A weakness has been identified in Tenda A21 1.0.0.0. This affects the function setdevicename of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to t...

CVE-2026-2886

The CVE-2026-2886 entry concerns Tenda A21 firmware 1.0.0.0, where the function SetOnlineDevName in /goform/SetOnlineDevName is vulnerable. Manipulating the devName argument causes a stack-based buffer overflow, enabling remote attack. The description notes that the exploit is publicly available....