CVE-2026-20482: Allocation of Resources Without Limits or Throttling

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

PT-2026-67153

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description A missing bounds check in the wlan AP driver allows for an out-of-bounds write. This condition can be exploited by a remote attacker in proximal or adjacent network positions to achiev...

Windows Gather Wireless Profile

Enumerate saved Wireless LAN profiles and attempt to recover cleartext key material with 'netsh wlan show profile key=clear' on a Windows shell or Meterpreter session. On modern Windows this yields the passphrase; on XP the PBKDF2-derived key may be shown instead. !/usr/bin/env python3 -- coding:...

Windows Gather Wireless Current Connection Info

Gather information about the current connection on each wireless LAN interface via 'netsh wlan show interfaces' on a Windows shell or Meterpreter session. !/usr/bin/env python3 -- coding: utf-8 -- """ Gather current WLAN connection details on each wireless interface Metasploit-style...

Windows WLAN Host system Data Compromise

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is caused by buffer overflows in the stack. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Windows WLAN Host system Data Compromise

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-21051

Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings...

CVE-2026-21051

Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings...

EUVD-2026-42821

Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings...

CVE-2026-25268 Stack-based Buffer Overflow in WLAN Host

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations...

WiFi Handshake Capture

Passively capture WPA/WPA2 EAPOL key exchanges on a monitor-mode interface and save matching frames to a PCAP file for offline cracking. !/usr/bin/env python3 -- coding: utf-8 -- """Passively capture WPA/WPA2 EAPOL handshakes on a monitor-mode interface.""" from future import annotations import o...

Windows Gather WiFi Keys

List saved WLAN profiles and extract cleartext PSKs with 'netsh wlan show profile key=clear' on a Windows shell or Meterpreter session. !/usr/bin/env python3 -- coding: utf-8 -- """ Extract saved WiFi profile keys from a Windows shell or Meterpreter session using netsh wlan, then display and save...

Windows WLAN Host system

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow an attacker to cause memory corruption...

CVE-2026-36956

A Cross-Site Request Forgery CSRF vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanisms such as anti-CSRF tokens or strict Origin/Referer validation for administrative API endpoints. An...

CVE-2026-10182

A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manipulation of the argument enrollee can lead to command injection. The attack can be launched remotely. The exploit has been publicly...

CVE-2026-20456

In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480851; Issue ID: MSV-6338...

CVE-2026-20456

In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480851; Issue ID: MSV-6338...

CVE-2026-20456

In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480851; Issue ID: MSV-6338...

CVE-2026-20456

In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480851; Issue ID: MSV-6338...

CVE-2026-20452

In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295...