RouterCVE

Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

2,281 CVEs

Hide EOL products

CVEs (2,281, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 101–125 of 2,281 (capped at 500)

CVE ID Severity Patch CVSS ↓ Published Description
CVE-2026-73749 CRITICAL Patched 9.8 2026-09-01 Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulne…
CVE-2026-52111 CRITICAL 9.8 2026-09-01 An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey
CVE-2026-19593 CRITICAL 9.8 2026-09-01 OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a reposito&hellip;
CVE-2026-51934 CRITICAL 9.8 2026-09-01 Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote attacker to execute arbitrary code via the fromSetCmdl&hellip;
CVE-2026-51769 CRITICAL 9.8 2026-09-01 Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to restart the cloud update check work&hellip;
CVE-2026-51770 CRITICAL 9.8 2026-09-01 Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forward attacker-controlled QoS sett&hellip;
CVE-2026-51767 CRITICAL 9.8 2026-09-01 Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset pairing state and reboot the device&hellip;
CVE-2026-78012 CRITICAL 9.8 2026-09-01 An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generat&hellip;
CVE-2026-51754 CRITICAL 9.8 2026-09-01 Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state v&hellip;
CVE-2026-51757 CRITICAL 9.8 2026-09-01 Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a firmware download or flash workflo&hellip;
CVE-2026-51760 CRITICAL 9.8 2026-09-01 Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-trigger firmware update activity acro&hellip;
CVE-2026-51762 CRITICAL 9.8 2026-09-01 Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to kick or clean stale mesh information/state an&hellip;
CVE-2026-51763 CRITICAL 9.8 2026-09-01 Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forcibly disconnect wireless clients via sen&hellip;
CVE-2026-51764 CRITICAL 9.8 2026-09-01 Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwrite cloud-result tracking &hellip;
CVE-2026-51765 CRITICAL 9.8 2026-09-01 Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to insert or replace mesh neighbor recor&hellip;
CVE-2026-51750 CRITICAL 9.8 2026-09-01 Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rescan and switch the primary mesh channe&hellip;
CVE-2026-51751 CRITICAL 9.8 2026-09-01 Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove a specified slave device from local &hellip;
CVE-2026-18808 CRITICAL 9.8 2026-09-01 Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) allows Code Injection. This i&hellip;
CVE-2026-18210 CRITICAL Patched 9.8 2026-09-01 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technological Products Computer Software Hardware Industry and T&hellip;
CVE-2026-84140 CRITICAL Patched 9.8 2026-09-01 Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84141 CRITICAL Patched 9.8 2026-09-01 Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84142 CRITICAL Patched 9.8 2026-09-01 Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enoug&hellip;
CVE-2026-84143 CRITICAL Patched 9.8 2026-09-01 Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another secur&hellip;
CVE-2026-84133 CRITICAL Patched 9.8 2026-09-01 Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84134 CRITICAL Patched 9.8 2026-09-01 Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.