CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5, and FH1202 V1.2.0.9 were found to have a stack overflow vulnerability via the page parameter at /L7Im.
Tenda AC10, AC1206, AC8, AC6, AC7, AC5, AC9, and AC10 v4.0 devices were found to contain a stack overflow via the list parameter in the formSetVirtualSer function.
Tenda AC10, AC1206, AC6, AC7, AC5, FH1203, AC9, and FH1205 devices were found to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
Tenda AC1206, AC8, AC5, AC10, and AC9 devices were found to contain a buffer overflow vulnerability in the formSetQosBand function via the list parameter.
Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6, and FH1205 V2.0.0.7 were found to have a stack overflow vulnerability via the deviceId parameter in the formSetDeviceName function.
Tenda AC6 V2.0, AC7 V1.0, F1203, AC5, FH1203, AC9, and FH1205 devices were found to contain a stack overflow via the deviceId parameter in the formSetClientState function.
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5, and FH1202 V1.2.0.9 were found to have a stack overflow vulnerability via the page parameter in the SafeEmailFilter function.
Devices Tenda AC10, AC1206, AC8, AC6, AC7, F1203, AC5, and FH1203 were found to contain a stack overflow via the list parameter in the setaccount function.
Tenda AC7, AC5, AC9, and FH1205 devices were found to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
Version 1.01.42 of the Tenda 4G300 was found to contain a stack overflow via the page parameter at /VirtualSer.
A command injection vulnerability was discovered in Netgear R7100LG version 1.0.0.78 via the password parameter at usb_remote_invite.cgi.
Netgear EX6200 version 1.0.3.94 was found to have a buffer overflow vulnerability via the wla_temp_ssid parameter in the acosNvramConfig_set function.
Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were found to have a buffer overflow vulnerability via the http_passwd parameter in password.cgi.
Netgear DGN3500 version 1.1.00.37 was found to have a buffer overflow vulnerability via the http_password parameter in setup.cgi.
Multiple buffer overflows were discovered in Netgear devices JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 via the http_passwd and http_username parameters in the update_auth function.
Multiple command injection vulnerabilities were discovered in the upgrade_handler function in Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19, via the firmwareRestore and firmwareServerip parameters.
Netgear DG834Gv5 version 1.6.01.34 was found to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters in bsw_ssid.cgi.
Version 1.3.3.154 of the Netgear R6900P router was found to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters in ia_ap_setting.cgi.
Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi.
In the kadm_rpc_xdr.c library in MIT Kerberos 5 before 1.20.2 and 1.21.x before 1.21.1, there is a bug related to freeing an uninitialized pointer. A remote authenticated user can trigger a kadmind crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS