CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
TP-Link Archer C7 and TL-WR841N Parental Control Remote Command Execution (RCE) Vulnerability (CVE-2025-9377)
[Affected Scope] End-of-Life (EOL) TP-Link Archer C7(EU) V2 (prior to 241108) and TL-WR841N/ND(MS) V9 (prior to 241108) routers.
[Impact] Authenticated attackers can execute arbitrary system commands and gain full control of the device via the Parental Control configuration page.
[Mitigation] Since these products are EOL, purchasing new supported hardware is highly recommended; otherwise, apply the emergency patch immediately and restrict management access.
D-Link DIR Series Routers ncc2 Binary DDNS Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2021-45382)
[Affected Scope] All hardware revisions of D-Link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the DDNS function, leading to full device compromise
[Mitigation] Since these devices have reached End of Life (EOL), no official patches will be released; immediate device replacement or strict access control is required