All CVEs — page 547 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• CRITICAL 9.9CVE-2026-941012026-09-21

  The vulnerability allows for a buffer overflow through the manipulation of the wan_num argument, leading to potential remote code execution or system compromise.

• CRITICAL 9.9CVE-2026-941002026-09-21

  The flaw is a buffer overflow vulnerability in the Netcore NBR200V2 1.3.241127.071246 firmware, specifically in the wan_config_set_vlan function. This allows remote attackers to exploit the vulnerability by manipulating the vlan_wanX.ports argument, leading to potential system compromise.

• CRITICAL 9.9CVE-2026-940992026-09-21

  A command injection vulnerability exists in the Netcore NBR200V2 1.3.241127.071246, allowing remote attackers to execute arbitrary commands via the QUERY_STRING argument in the file restore.cgi.

• CRITICAL 9.1CVE-2026-940982026-09-21

  The vulnerability allows for command injection via the QUERY_STRING argument in the Firmware Upgrade CGI Endpoint, enabling remote execution of arbitrary commands.

• CRITICAL 10CVE-2026-940972026-09-21

  A command injection vulnerability exists in the Netcore NBR200V2 1.3.241127.071246, allowing remote attackers to execute arbitrary commands via crafted arguments.

• CRITICAL 9.9CVE-2026-940962026-09-21

  A command injection vulnerability exists in the Netcore NBR200V2 1.3.241127.071246, allowing remote attackers to execute arbitrary commands via the ipv4 argument in the network_tools file.

• CRITICAL 9.9CVE-2026-940952026-09-21

  A command injection vulnerability exists in the Traceroute Diagnostic Feature of Netcore NBR200V2 1.3.241127.071246, allowing remote attackers to execute arbitrary commands via the manipulation of the 'url' argument.

• MEDIUM 4.3CVE-2026-94094public exploit available2026-09-20
• MEDIUM 6.3CVE-2026-94093public exploit available2026-09-20
• MEDIUM 5.5CVE-2026-94092public exploit available2026-09-20
• MEDIUM 5.5CVE-2026-94091public exploit available2026-09-20
• MEDIUM 6.3CVE-2026-94090public exploit available2026-09-20
• CRITICAL 10CVE-2026-94089public exploit available2026-09-20

  This vulnerability allows for a stack-based buffer overflow through the manipulation of the id/password arguments in the /webfa_authentication.cgi file, leading to potential remote code execution.

• MEDIUM 6.3CVE-2026-94051public exploit available2026-09-20
• MEDIUM 4.3CVE-2026-940502026-09-20
• MEDIUM 4.3CVE-2026-94049public exploit available2026-09-20
• MEDIUM 6.6CVE-2026-94048public exploit available2026-09-20
• MEDIUM 6.3CVE-2026-94047public exploit available2026-09-20
• MEDIUM 4.3CVE-2026-94046public exploit available2026-09-20
• LOW 3.5CVE-2026-94045public exploit available2026-09-20
• HIGH 7.3CVE-2026-94044public exploit available2026-09-20
• MEDIUM 5.3CVE-2026-94043public exploit available2026-09-20
• MEDIUM 6.3CVE-2026-94042public exploit available2026-09-20
• MEDIUM 6.3CVE-2026-94041public exploit available2026-09-20
• UNSCOREDCVE-2026-888572026-09-20