#Router Vulnerability
All CosmicBytez Labs articles tagged #Router Vulnerability, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-96257: Critical Stack-Based Buffer Overflow in Fast FAC1203R Gigabit Edition Routers
Critical CVSS 10 stack overflow in Fast FAC1203R Gigabit Edition routers is remotely exploitable pre-auth; public PoC exploit code is available.
- Security
CVE-2026-90699: D-Link DWR-M920 OS Command Injection via PIN Manage Setup
D-Link DWR-M920 1.1.7 lets remote attackers inject OS commands through the formPinManageSetup handler; a public exploit is already available.
- Security
CVE-2026-90702: D-Link DWR-M921 OS Command Injection via Disk Format Handler
D-Link DWR-M921 1.1.52 lets remote attackers inject OS commands through the formDiskFormat handler; a public exploit is already available.
- Security
CVE-2026-90703: D-Link DWR-M921 OS Command Injection via Disk Share Handler
D-Link DWR-M921 1.1.52 lets remote attackers inject OS commands through the formDiskCreateShare handler; a public exploit is already available.
- Security
CVE-2026-86152: Max-Severity Tenda CP3 Command Injection via AutoAddWifi
CVSS 10.0 flaw in Tenda CP3's Kylin AutoAddWifi thread lets remote attackers inject and execute arbitrary OS commands.
- Security
CVE-2026-86151: Tenda CP3 OS Command Injection via Network Config Handler
Tenda CP3 firmware 27.5.57.101 lets remote attackers inject OS commands through its network configuration handler, no authentication noted.
- Security
CVE-2026-86153: Tenda CP3 Improper Privilege Management in Redirect Service
Tenda CP3's SetRedirectEnable function lacks authorization checks, letting remote attackers alter port-forwarding without admin access.