CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
TanStack npm Packages Supply Chain Compromise via GitHub Actions OIDC Exploitation (CVE-2026-45321)
[Affected Scope] 84 malicious versions across 42 @tanstack/* packages published between 19:20 and 19:26 UTC on 2026-05-11
[Impact] Attackers successfully published credential-stealing malware under trusted identities by hijacking legitimate OIDC tokens
[Mitigation] Immediately audit dependency trees, purge affected package versions, and rotate all potentially exposed credentials
TP-Link Archer C7 and TL-WR841N Parental Control Remote Command Execution (RCE) Vulnerability (CVE-2025-9377)
[Affected Scope] End-of-Life (EOL) TP-Link Archer C7(EU) V2 (prior to 241108) and TL-WR841N/ND(MS) V9 (prior to 241108) routers.
[Impact] Authenticated attackers can execute arbitrary system commands and gain full control of the device via the Parental Control configuration page.
[Mitigation] Since these products are EOL, purchasing new supported hardware is highly recommended; otherwise, apply the emergency patch immediately and restrict management access.
Zyxel VMG4325-B10A Legacy DSL CPE CGI Program Remote Command Injection Vulnerability (CVE-2024-40890) Analysis and Mitigation Guide
[Affected Scope] Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 and prior
[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with system privileges by sending a crafted HTTP POST request to the CGI program
[Mitigation] Since this is an end-of-life (EOL) legacy device, immediate hardware replacement or strict access control restricting WAN-side management access is highly recommended
TP-Link TL-WR841N Router dropbearpwd Improper Authentication Information Disclosure Vulnerability (CVE-2023-50224)
[Affected Scope] TP-Link TL-WR841N wireless routers
[Impact] Network-adjacent attackers can bypass authentication to access the httpd service (TCP port 80) and disclose stored credentials, leading to full device compromise
[Mitigation] Apply the latest official firmware updates from the vendor and disable remote management features immediately
ASUS RT-AX55 Router start_apply.htm OS Command Injection Vulnerability (CVE-2023-39780) Analysis and Mitigation Guide
[Affected Scope] ASUS RT-AX55 devices running firmware version 3.0.0.4.386.51598 and prior.
[Impact] Authenticated attackers can execute arbitrary system commands with root privileges, leading to complete device compromise.
[Mitigation] Immediately upgrade to the latest official secure firmware version and disable remote WAN management.
Cisco Small Business RV Series Routers Remote Command Execution Vulnerability Analysis and Mitigation Guide (CVE-2023-20118)
[Affected Scope] Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers
[Impact] An authenticated, remote attacker can execute arbitrary commands with root-level privileges, leading to complete device compromise
[Mitigation] Since these devices are End-of-Life (EoL) and no patches will be released, administrators must disable remote management or replace the devices immediately
D-Link DIR Series Routers ncc2 Binary DDNS Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2021-45382)
[Affected Scope] All hardware revisions of D-Link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the DDNS function, leading to full device compromise
[Mitigation] Since these devices have reached End of Life (EOL), no official patches will be released; immediate device replacement or strict access control is required
Zyxel EMG2926 Home Router nslookup Diagnostic Tool Remote Command Injection (CVE-2017-6884)
[Affected Scope] Zyxel EMG2926 home routers running firmware version V1.00(AAQT.4)b8
[Impact] An authenticated attacker can execute arbitrary system commands with root privileges by manipulating diagnostic parameters
[Mitigation] Apply the latest firmware updates immediately and restrict external access to the management interface
NETGEAR WNR2000v5 hidden_lang_avi Parameter Buffer Overflow Remote Code Execution (CVE-2016-10174)
[Affected Scope] NETGEAR WNR2000v5 wireless routers.
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges and fully compromise the device by sending a specially crafted HTTP request.
[Mitigation] Immediately apply the official firmware update from the vendor and disable remote management interfaces.
D-Link DIR-600 Router Multiple CSRF Vulnerabilities (CVE-2014-100005) Technical Advisory
[Affected Scope] D-Link DIR-600 router (hardware revision Bx) with firmware versions prior to 2.17b02.
[Impact] Remote attackers can hijack administrator sessions to create unauthorized admin accounts, enable remote management, apply malicious configurations, or trigger arbitrary ping requests.
[Mitigation] Upgrade to firmware version 2.17b02 or later, disable remote management, and restrict access to the administration interface.
Cisco IOS XR BGP Unrecognized Transitive Attribute Handling Vulnerability (CVE-2010-3035) Analysis and Mitigation Guide
[Affected Scope] Cisco IOS XR software versions 3.4.0 through 3.9.1 with the Border Gateway Protocol (BGP) routing process enabled.
[Impact] A remote attacker can trigger a denial of service (BGP peering session reset) by sending a specially crafted BGP prefix announcement, potentially disrupting global routing tables.
[Mitigation] Apply the official Cisco Software Maintenance Upgrade (SMU) or upgrade to a non-vulnerable release of Cisco IOS XR.