https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 22:09:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11691 bdu:2025-11691 https://cve.radiocsirt.org/vuln/bdu:2025-11691 https://cve.radiocsirt.org/vuln/cnvd-2025-24487 cnvd-2025-24487 https://cve.radiocsirt.org/vuln/cnvd-2025-24487 https://cve.radiocsirt.org/vuln/euvd-2026-253132 EUVD-2026-253132 https://cve.radiocsirt.org/vuln/euvd-2026-253132 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57296 <p>Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface. When handling the list and vlanId parameters, the sub_ADBC0 helper function concatenates these user-supplied values into nvram set system commands using doSystemCmd, without validating or sanitizing special characters (e.g., ;, &#34;, #). An unauthenticated or authenticated attacker can exploit this by submitting a crafted POST request, leading to arbitrary system command execution on the affected device.</p> <p>Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface. When handling the list and vlanId parameters, the sub_ADBC0 helper function concatenates these user-supplied values into nvram set system commands using doSystemCmd, without validating or sanitizing special characters (e.g., ;, &#34;, #). An unauthenticated or authenticated attacker can exploit this by submitting a crafted POST request, leading to arbitrary system command execution on the affected device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-57296 https://cve.radiocsirt.org/vuln/ghsa-4jwf-c7mx-j34w <p>Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface. When handling the list and vlanId parameters, the sub_ADBC0 helper function concatenates these user-supplied values into nvram set system commands using doSystemCmd, without validating or sanitizing special characters (e.g., ;, &#34;, #). An unauthenticated or authenticated attacker can exploit this by submitting a crafted POST request, leading to arbitrary system command execution on the affected device.</p> <p>Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface. When handling the list and vlanId parameters, the sub_ADBC0 helper function concatenates these user-supplied values into nvram set system commands using doSystemCmd, without validating or sanitizing special characters (e.g., ;, &#34;, #). An unauthenticated or authenticated attacker can exploit this by submitting a crafted POST request, leading to arbitrary system command execution on the affected device.</p> https://cve.radiocsirt.org/vuln/ghsa-4jwf-c7mx-j34w