https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T16:58:53.234310+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05529 bdu:2024-05529 2026-10-16T16:58:53.240079+00:00 bdu:2024-05529 https://cve.radiocsirt.org/vuln/euvd-2026-222316 EUVD-2026-222316 2026-10-16T16:58:53.240131+00:00 EUVD-2026-222316 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38471 fkie_cve-2024-38471 2026-10-16T16:58:53.240153+00:00

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.

 https://cve.radiocsirt.org/vuln/ghsa-37mw-xfjf-m6pf GHSA-37mw-xfjf-m6pf 2026-10-16T16:58:53.240197+00:00

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.

 https://cve.radiocsirt.org/vuln/jvndb-2024-003831 jvndb-2024-003831 2026-10-16T16:58:53.240220+00:00

Multiple products provided by TP-LINK contains an OS command injection vulnerability (CWE-78) related to the backup/restore function. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.