https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:32:10.600218+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-37954 cnvd-2017-37954 2026-10-03T02:32:10.689898+00:00 cnvd-2017-37954 https://cve.radiocsirt.org/vuln/euvd-2026-79300 EUVD-2026-79300 2026-10-03T02:32:10.689949+00:00 EUVD-2026-79300 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16959 fkie_cve-2017-16959 2026-10-03T02:32:10.689966+00:00

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP header, related to the set_sysinfo and get_sysinfo functions in /usr/lib/lua/luci/controller/locale.lua in uhttpd.

 https://cve.radiocsirt.org/vuln/ghsa-f5x4-48f8-6w8q GHSA-f5x4-48f8-6w8q 2026-10-03T02:32:10.689999+00:00

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP header, related to the set_sysinfo and get_sysinfo functions in /usr/lib/lua/luci/controller/locale.lua in uhttpd.

 https://cve.radiocsirt.org/vuln/gsd-2017-16959 gsd-2017-16959 2026-10-03T02:32:10.690018+00:00 gsd-2017-16959