https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:19:00.498115+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02610 bdu:2023-02610 2026-10-07T16:19:00.501708+00:00 bdu:2023-02610 https://cve.radiocsirt.org/vuln/euvd-2026-186330 EUVD-2026-186330 2026-10-07T16:19:00.501740+00:00 EUVD-2026-186330 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32147 fkie_cve-2023-32147 2026-10-07T16:19:00.501753+00:00

D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of the LocalIPAddress parameter provided to the HNAP1 endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-19544.

 https://cve.radiocsirt.org/vuln/ghsa-x53g-896j-v24h GHSA-x53g-896j-v24h 2026-10-07T16:19:00.501786+00:00

D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of the LocalIPAddress parameter provided to the HNAP1 endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19544.

 https://cve.radiocsirt.org/vuln/gsd-2023-32147 gsd-2023-32147 2026-10-07T16:19:00.501805+00:00 gsd-2023-32147 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0087 WID-SEC-W-2023-0087 — D-LINK Router DIR-2640: Mehrere Schwachstellen 2026-10-07T16:19:00.501818+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen im D-LINK Routermodell DIR-2640 ausnutzen, um beliebigen Programmcode auszuführen und Sicherheitsmaßnahmen zu umgehen.