https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:52:59 +0000 https://cve.radiocsirt.org/vuln/cve-2026-41927 <p><strong>Affected:</strong> Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender</p> <p>WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved return address by sending a POST request with a Content-Length header exceeding 512 bytes. Attackers can exploit insufficient length validation in the fgets() call to achieve arbitrary code execution through return-oriented programming or return-to-libc techniques.</p> <p><strong>Affected:</strong> Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender</p> <p>WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved return address by sending a POST request with a Content-Length header exceeding 512 bytes. Attackers can exploit insufficient length validation in the fgets() call to achieve arbitrary code execution through return-oriented programming or return-to-libc techniques.</p> https://cve.radiocsirt.org/vuln/cve-2026-41927