https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:31:14.825153+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319359 EUVD-2026-319359 2026-10-07T00:31:14.875954+00:00 EUVD-2026-319359 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41926 fkie_cve-2026-41926 2026-10-07T00:31:14.876001+00:00

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter, websHostFilter, portForward, singlePortForward, and ipportFilter using subshell syntax or unfiltered parameters, with payloads persisting in NVRAM and re-executing on every subsequent firewall.cgi request.

 https://cve.radiocsirt.org/vuln/ghsa-r939-4h6w-w7j6 GHSA-r939-4h6w-w7j6 2026-10-07T00:31:14.876041+00:00

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter, websHostFilter, portForward, singlePortForward, and ipportFilter using subshell syntax or unfiltered parameters, with payloads persisting in NVRAM and re-executing on every subsequent firewall.cgi request.