CVE-2026-20407

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00464377; Issue ID: MSV-4905...

CVE-2026-20407

The wlan STA driver in MediaTek Chipsets is vulnerable to a local escalation of privilege due to a missing bounds check . An attacker with User execution privileges can exploit this flaw to gain elevated permissions without requiring user interaction. While specific affected versions are not prov...

CVE-2026-1743

CVE-2026-1743 affects DJI Mavic Mini, Air, Spark and Mini SE up to 01.00.0500. The vulnerability concerns an unknown function in the Enhanced Wi‑Fi Pairing component that can be bypassed via capture‑replay from within a local network. Impact is described as partial availability loss with no confi...

PT-2026-5641

In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 /...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities; these vulnerabilities stem from the lack of boundary checking in the wlan STA driver, which may lead to local privilege escalation...

DJI多款产品 安全漏洞

DJI Spark, among others, are products of Chinese company DJI. DJI Spark is a super-lightweight foldable drone, similar to DJI Mavic Mini. DJI Mini SE is an entry-level drone. Several DJI products have security vulnerabilities, stemming from an authentication bypass in the Enhanced Wi-Fi Pairing...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. There are security vulnerabilities in MediaTek Chipsets, and these vulnerabilities stem from the fact that the wlan AP/STA firmware fails to detect exceptions, which may lead to remote denial-of-service attacks...

dooblou WiFi File Transfer 跨站脚本漏洞

Dooblou WiFi File Transfer is a file transfer application developed by the dooblou company. Version 1.0.8 of Dooblou WiFi File Transfer contains a cross-site scripting vulnerability. This vulnerability stems from the use of file and folder names that contain storage-type cross-site scripts,...

SUSE CVE-2026-25061

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

CVE-2026-0709

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution...

PT-2026-5390

Name of the Vulnerable Software and Affected Versions Hikvision Wireless Access Points affected versions not specified Description Hikvision Wireless Access Points are susceptible to authenticated command execution because of inadequate input validation. An attacker possessing valid credentials c...

The vulnerability of Airoha Technology’s Custom Protocol Bluetooth-chip-based TWS earphones allows a hacker to circumvent existing security restrictions.

The vulnerability of Airoha Technology’s Custom Protocol Bluetooth-chip TWS headphones is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

CVE-2026-0709: Improper Neutralization of Special Elements used in an OS Command

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution...

WiFiPenTester: Advancing Wireless Ethical Hacking with Governed GenAI

Wireless ethical hacking relies heavily on skilled practitioners manually interpreting reconnaissance results and executing complex, time-sensitive sequences of commands to identify vulnerable targets, capture authentication handshakes, and assess password resilience; a process that is inherently...

The vulnerability of Reolink WiFi IP cameras’ microprogramming software lies in the insecure storage of confidential information, allowing intruders to execute arbitrary commands.

The vulnerability of Reolink WiFi IP cameras’ microprogramming software is related to the insecure storage of confidential information. Exploiting this vulnerability could allow a intruder to execute arbitrary commands...

Hikvision Wireless Access Points security vulnerabilities

Hikvision Wireless Access Points are wireless access point devices produced by the Chinese company Hikvision. There are security vulnerabilities in Hikvision Wireless Access Points, and these vulnerabilities stem from insufficient input validation, which may allow authenticated attackers to execu...

The vulnerability of the WLAN microprogramming software’s firmware in Qualcomm embedded chips allows a hacker to induce a service failure.

The vulnerability of WLAN microprogramming software in Qualcomm embedded chips lies in the use of the assert function or similar operators. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted NDP packet...

The vulnerability of the WLAN microprogramming software’s firmware in Qualcomm embedded chips allows a hacker to induce a service failure.

The vulnerability of WLAN microprogramming software’s firmware in Qualcomm embedded chips stems from operations that occur outside of the buffers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

LEDE security vulnerabilities

LEDE is a router firmware developed by Coolsnowwolf’s individual developer. Versions of LEDE such as r25.10.1 and earlier contained security vulnerabilities. These vulnerabilities stemmed from an infinite loop in the Wi-Fi driver component bnlib.C, which could lead to a denial-of-service attack...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005053 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in t...