Asus and Zoom patch router and Workplace privilege bugs
Zoom Workplace for Windows 7.1.8 fixes CVE-2026-108186 (CVSS 9.6) and CVE-2026-108187.
Stories per day · 30 days
2 RSS
Relatedcommand-injection3edimax3soho2ap1asus1buffer-overflow1canada1exploit-db1firmware1gs19001juniper1manufacturing-test1out-of-bounds1privilege-escalation1session-smart1setwan1workplace1zoom1
16 stories, newest first · one card per story
Stories tagged #router
Zyxel GS1900 switches and APs hit by out-of-bounds write and buffer overflow
Zyxel security advisory AV26-1114 reports out-of-bounds write in GS1900 series switches and buffer overflow in APs FWA7 Security Routers; users should apply updates.
Canada flags Juniper Session Smart flaws fixed in recent releases
Session Smart Conductor and Router builds before 7.0.5, 7.1.7 and 7.2.3 are listed; no CVE ids or exploitation status are given.
Edimax BR-6478AC v2.20 exploit enables authenticated command injection
Exploit-DB published a remote exploit for firmware v2.20; no CVE, patch, or confirmed attacks are named.
Edimax BR-6478AC v2.20 setWAN handler has authenticated command injection
A WAN-settings POST passes an unsanitized username into system(), and the check looks at one character.
[remote] Teltonika_RutOS 00.07.06.21 - command injection
Exploit-DB lists a remote command-injection exploit for Teltonika RutOS 00.07.06.21.
Inside the Telecom Attack Surface: SS7, BGP Hijacking, and the Technical Reality of Nation-State Intrusions
Nation-state actors abuse SS7, BGP, and unpatched telecom routers, including Salt Typhoon persistence via GRE tunnels.
[0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)
Teltonika RutOS 00.07.06.21 has an authenticated ipsec.lua command injection that runs commands as root.
D-Link DIR-822A Router Vulnerability Scores CVSS 10.0 With Public PoC Available
D-Link disclosed CVSS 10.0 unauthenticated stack buffer overflow in non-US DIR-822A routers with public PoC; no patch available yet.
D-Link Router Hit by CVSS 10.0 Flaw Exploitable Remotely Without Authentication
D-Link disclosed CVE-2026-86296, a CVSS 10.0 unauthenticated stack buffer overflow in DIR-822A routers, with a public PoC reportedly released.
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
VulnCheck discloses two factory implants, SPEAKINGSTONE and DARKLANTERN, in ZBT router firmware granting unauthenticated remote attackers root command execution.
[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
A proof-of-concept for unauthenticated OS command injection in Linksys E1200 router firmware 2.0.04 has been published on Exploit-DB.
VU#756733: Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability
CERT/CC warns Calix GS7 XGS GS5239XG routers on firmware EXOS/6.6.47 expose an unauthenticated UPnP WANIPConnection service on the public WAN interface.
A Deep Dive Into Attempted Exploitation of CVE-2023
Mirai-like botnet scans exploit TP-Link EOL router flaw CVE-2023-33538 after CISA KEV addition, though observed exploit code is flawed.
9
[remote] ipTIME A3004T - Remote Code Execution
A remote code execution exploit was published for ipTIME A3004T routers, a flaw relevant to internet-facing devices.
[dos] LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting
Stored cross-site scripting in OpenWrt LuCI via malicious DHCPv6 lease hostnames allows router interface attacks.