PT-2026-83183

Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain setup wizard and onboarding configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-1686

A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cstemodules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2026-1686

A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cstemodules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is possible to initiate the attack remotely. The...

The vulnerability of the sub_424320() function in D-Link DIR-823G router’s software allows a hacker to induce a service failure.

The vulnerability of the sub424320 function in D-Link DIR-823G router microprogramming software is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to trigger a service failure by sending a specially crafted HNAP1/SetIgnoreWizardConfig request...