https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 05:33:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-05317 bdu:2021-05317 https://cve.radiocsirt.org/vuln/bdu:2021-05317 https://cve.radiocsirt.org/vuln/cnvd-2022-06695 cnvd-2022-06695 https://cve.radiocsirt.org/vuln/cnvd-2022-06695 https://cve.radiocsirt.org/vuln/euvd-2026-29000 EUVD-2026-29000 https://cve.radiocsirt.org/vuln/euvd-2026-29000 https://cve.radiocsirt.org/vuln/fkie_cve-2021-34980 <p>This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAP_LOGIN_TOKEN environment variable, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14107.</p> <p>This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAP_LOGIN_TOKEN environment variable, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14107.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-34980 https://cve.radiocsirt.org/vuln/ghsa-65c2-8xvq-gj7j <p>This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAP_LOGIN_TOKEN environment variable, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14107.</p> <p>This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAP_LOGIN_TOKEN environment variable, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14107.</p> https://cve.radiocsirt.org/vuln/ghsa-65c2-8xvq-gj7j https://cve.radiocsirt.org/vuln/gsd-2021-34980 gsd-2021-34980 https://cve.radiocsirt.org/vuln/gsd-2021-34980