Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:08:23 +0000 cnvd-2020-35174 https://cve.radiocsirt.org/vuln/cnvd-2020-35174 cnvd-2020-35174 https://cve.radiocsirt.org/vuln/cnvd-2020-35174 EUVD-2026-256267 https://cve.radiocsirt.org/vuln/euvd-2026-256267 EUVD-2026-256267 https://cve.radiocsirt.org/vuln/euvd-2026-256267 fkie_cve-2018-14558 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14558 <p>An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the &#34;formsetUsbUnload&#34; function executes a dosystemCmd function with untrusted input.</p> <p>An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the &#34;formsetUsbUnload&#34; function executes a dosystemCmd function with untrusted input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-14558 GHSA-jh5j-w2c9-jcff https://cve.radiocsirt.org/vuln/ghsa-jh5j-w2c9-jcff <p>An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the &#34;formsetUsbUnload&#34; function executes a dosystemCmd function with untrusted input.</p> <p>An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the &#34;formsetUsbUnload&#34; function executes a dosystemCmd function with untrusted input.</p> https://cve.radiocsirt.org/vuln/ghsa-jh5j-w2c9-jcff gsd-2018-14558 https://cve.radiocsirt.org/vuln/gsd-2018-14558 gsd-2018-14558 https://cve.radiocsirt.org/vuln/gsd-2018-14558