CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.07)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wrlEn parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepauth parameter at /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the ssid_5g parameter at /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router with firmware version V15.03.06.33_en via the security_5g parameter at /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC device running firmware version V15.03.06.33_en via the wrlEn_5g parameter at /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware version V15.03.06.33_en via the ssid parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware V15.03.06.33_en, triggered via the security parameter in a request to /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepauth_5g parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey3 parameter at the /goform/WifiBasicSet endpoint.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepkey_5g parameter of the /goform/WifiBasicSet script. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey3_5g parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey1_5g parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepkey parameter at the /goform/WifiBasicSet endpoint. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware V15.03.06.33_en via the wepkey4 parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey2 parameter in the /goform/WifiBasicSet endpoint.
A Cross Site Scripting (XSS) vulnerability in the IRZ Electronics RUH2 GSM router allows an attacker to inject malicious script via the Upload File parameter. This can lead to theft of sensitive information such as session data or cookies.
In the Comfast CF-WR6110N router version V2.3.1, an incorrect access control vulnerability was found. A remote attacker on the same network can send any HTTP request to an unauthenticated page, forcing the server to generate a SESSION_ID. Using this SESSION_ID, the attacker can then perform authenticated requests.
Softr v2.0 was found to contain an HTML injection vulnerability via the Work Space Name parameter. An attacker can inject malicious HTML code that will be executed in the victim's browser.
Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via the image clipping function.
A stack overflow vulnerability was discovered in Notepad++ version 8.4.1 within the Finder::add() component. This flaw could be exploited for remote code execution or application crash.