Aggregator

Submit #775161 / VDB-352405

A vulnerability identified as critical has been detected in Tenda A15 15.13.07.13. The impacted element is the function UploadCfg of the file /cgi-bin/UploadCfg. The manipulation of the argument File leads to stack-based buffer overflow. This vulnerability is listed as CVE-2026-4567. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability categorized as critical has been discovered in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. This vulnerability is tracked as CVE-2026-4566. The attack can be launched remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #775156 / VDB-352404

A vulnerability was found in Tenda AC21 16.03.08.16. It has been rated as critical. Impacted is the function formSetQosBand of the file /goform/SetNetControlList. Performing a manipulation of the argument list results in buffer overflow. This vulnerability is identified as CVE-2026-4565. The attack can be initiated remotely. Additionally, an exploit exists.

Submit #775154 / VDB-347114

Submit #775153 / VDB-347130

Submit #775132 / VDB-352403

Submit #775120 / VDB-310918

Submit #775119 / VDB-352402

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.2. It has been declared as critical. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Handler. Such manipulation of the argument invokeTarget leads to code injection. This vulnerability is referenced as CVE-2026-4564. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #780202 / VDB-321281

Submit #780201 / VDB-329943

Submit #780200 / VDB-329944

Submit #775118 / VDB-327358

Submit #775117 / VDB-327354

A vulnerability was found in MacCMS up to 2025.1000.4052. It has been classified as problematic. This vulnerability affects the function order_info of the file application/index/controller/User.php of the component Member Order Detail Interface. This manipulation of the argument order_id causes authorization bypass. The identification of this vulnerability is CVE-2026-4563. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in MacCMS 2025.1000.4052 and classified as critical. This affects an unknown part of the file application/api/controller/Timming.php of the component Timming API Endpoint. The manipulation results in missing authentication. This vulnerability was named CVE-2026-4562. The attack may be performed from remote. In addition, an exploit is available.

Submit #775116 / VDB-352401

Submit #775050 / VDB-352400