Palo Alto Networks Prisma SD-WAN ION 5.6.x / 6.1.x < 6.1.10 / 6.2.x / 6.3.x < 6.3.4 / 6.4.x < 6.4.2 / 6.5.0 Denial of Service (CVE-2025-0122)

The version of the remote Palo Alto Networks Prisma SD-WAN ION device is 5.6.x, 6.1.x prior to 6.1.10, 6.2.x, 6.3.x prior to 6.3.4, 6.4.x prior to 6.4.2, or 6.5.0. It is, therefore, affected by a denial of service vulnerability: - A denial-of-service DoS vulnerability in Palo Alto Networks Prisma...

Palo Alto Networks Prisma SD-WAN ION 5.6.x < 5.6.19 / 6.1.x < 6.1.8 / 6.2.x / 6.3.x < 6.3.2 SSH Prefix Truncation (Terrapin) (CVE-2023-48795)

The version of the remote Palo Alto Networks Prisma SD-WAN ION device is 5.6.x prior to 5.6.19, 6.1.x prior to 6.1.8, 6.2.x, or 6.3.x prior to 6.3.2. It is, therefore, affected by an SSH prefix truncation vulnerability known as Terrapin: - The SSH transport protocol with certain OpenSSH extension...

CVE-2026-25857

Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality formSetWanDiag. The implementation constructs a shell command that invokes curl and incorporates attacker-controlled input into the command line without...

EUVD-2026-5714

Tenda G300-F router firmware versio 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality formSetWanDiag. The implementation constructs a shell command that invokes curl and incorporates attacker-controlled input into the command line without...

CVE-2026-25857

Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality formSetWanDiag. The implementation constructs a shell command that invokes curl and incorporates attacker-controlled input into the command line without...

CVE-2026-25857

Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality formSetWanDiag. The implementation constructs a shell command that invokes curl and incorporates attacker-controlled input into the command line without...

CVE-2026-25857 Tenda G300-F Command Injection via formSetWanDiag

Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality formSetWanDiag. The implementation constructs a shell command that invokes curl and incorporates attacker-controlled input into the command line without...

CVE-2026-25857 Tenda G300-F Command Injection via formSetWanDiag

Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality formSetWanDiag. The implementation constructs a shell command that invokes curl and incorporates attacker-controlled input into the command line without...

CVE-2026-25857

CVE-2026-25857 affects the Tenda G300-F router. Affected firmware: versions prior to 16.01.14.2. The issue lies in the WAN diagnostic function formSetWanDiag, which builds a shell command invoking curl and injects attacker-controlled input without proper sanitization. This allows a remote attacke...

CVE-2026-2056

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

Tenda G300-F 操作系统命令注入漏洞

The Tenda G300-F is a VPN router produced by the Chinese company Tenda. Versions of the Tenda G300-F starting from 16.01.14.2 and earlier have a vulnerability related to operating system command injection. This vulnerability stems from the presence of OS command injection in the WAN diagnostic...

CVE-2026-2056

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

CVE-2026-2056 D-Link DIR-605L/DIR-619L DHCP Connection Status wan_connection_status.asp information disclosure

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

CVE-2026-2056

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

CVE-2026-2056 D-Link DIR-605L/DIR-619L DHCP Connection Status wan_connection_status.asp information disclosure

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

EUVD-2026-5661

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

D-Link DIR-605L和D-Link DIR-619L 访问控制错误漏洞

The D-Link DIR-605L and D-Link DIR-619L are wireless routers produced by the Chinese company D-Link. The D-Link DIR-605L versions 2.06B01/2.13B01 and DIR-619L versions 2.06B01/2.13B01 have a vulnerability related to access control. This vulnerability stems from incorrect operations on the...

CVE-2026-24934

The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an external server for the device's WAN IP address. An unauthenticated remote attacker can perform a Man-in-the-Middle MitM attack to spoof the response, leading the device to update its...

CVE-2026-24934

The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an external server for the device's WAN IP address. An unauthenticated remote attacker can perform a Man-in-the-Middle MitM attack to spoof the response, leading the device to update its...

CVE-2026-24934 An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.

The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an external server for the device's WAN IP address. An unauthenticated remote attacker can perform a Man-in-the-Middle MitM attack to spoof the response, leading the device to update its...