CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WAVLINK WN701AE Router static_route_setting.sh Remote Command Injection Vulnerability (CVE-2026-120227) Security Advisory
[Affected Scope] WAVLINK WN701AE router devices running firmware version M01AE_V260105
[Impact] Authenticated remote attackers can execute arbitrary OS commands via the web management interface, leading to complete device compromise
[Mitigation] Restrict external access to the web administration interface and apply firmware updates or implement strict firewall access control lists (ACLs)
WAVLINK WL-WN530HG4B Router wapi.cgi Port Forwarding Remote Command Injection Vulnerability (CVE-2026-120197) Technical Advisory
[Affected Scope] WAVLINK WL-WN530HG4B router with firmware version M_V260724.
[Impact] Authenticated remote attackers can exploit the 'Name' parameter within the port forwarding function of '/cgi-bin/wapi.cgi' to execute arbitrary OS commands with root privileges.
[Mitigation] Restrict access to the router's management interface, apply firewall rules to block malicious payloads, and upgrade to the latest patched firmware version.
TanStack npm Packages Supply Chain Compromise via GitHub Actions OIDC Exploitation (CVE-2026-45321)
[Affected Scope] 84 malicious versions across 42 @tanstack/* packages published between 19:20 and 19:26 UTC on 2026-05-11
[Impact] Attackers successfully published credential-stealing malware under trusted identities by hijacking legitimate OIDC tokens
[Mitigation] Immediately audit dependency trees, purge affected package versions, and rotate all potentially exposed credentials
D-Link DIR Series Routers ncc2 Binary DDNS Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2021-45382)
[Affected Scope] All hardware revisions of D-Link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the DDNS function, leading to full device compromise
[Mitigation] Since these devices have reached End of Life (EOL), no official patches will be released; immediate device replacement or strict access control is required
DrayTek Vigor Routers Unauthenticated Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2020-8515)
[Affected Scope] DrayTek Vigor2960 (1.3.1_Beta and prior), Vigor3900 (1.4.4_Beta and prior), and Vigor300B (1.3.3_Beta, 1.4.2.1_Beta, 1.4.4_Beta and prior)
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the web management interface, leading to complete device compromise
[Mitigation] Immediately upgrade the device firmware to version v1.5.1 or higher, and disable WAN-side web management access
NETGEAR WNR2000v5 hidden_lang_avi Parameter Buffer Overflow Remote Code Execution (CVE-2016-10174)
[Affected Scope] NETGEAR WNR2000v5 wireless routers.
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges and fully compromise the device by sending a specially crafted HTTP request.
[Mitigation] Immediately apply the official firmware update from the vendor and disable remote management interfaces.