https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T23:19:13.094836+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-01170 bdu:2019-01170 2026-10-23T23:19:13.097979+00:00 bdu:2019-01170 https://cve.radiocsirt.org/vuln/euvd-2026-176137 EUVD-2026-176137 2026-10-23T23:19:13.098009+00:00 EUVD-2026-176137 https://cve.radiocsirt.org/vuln/fkie_cve-2019-8319 fkie_cve-2019-8319 2026-10-23T23:19:13.098023+00:00

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteIPv4Settings API function, as demonstrated by shell metacharacters in the Gateway field.

 https://cve.radiocsirt.org/vuln/ghsa-gjqf-66pg-h4cm GHSA-gjqf-66pg-h4cm 2026-10-23T23:19:13.098052+00:00

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteIPv4Settings API function, as demonstrated by shell metacharacters in the Gateway field.

 https://cve.radiocsirt.org/vuln/gsd-2019-8319 gsd-2019-8319 2026-10-23T23:19:13.098070+00:00 gsd-2019-8319