CVE Vulnerability Advisory Database

[Affected Scope] Oray Pugongying X5 Pro routers up to version 7.6.1

[Impact] Remote authenticated attackers with high privileges can exploit path traversal to overwrite arbitrary files and execute code with root privileges

[Mitigation] Restrict access to the management interface immediately and isolate the device from untrusted networks

[Affected Scope] Oray Pugongying X5 Pro router versions up to and including 7.6.1

[Impact] A restricted account can bypass authorization checks to remotely invoke sensitive administrative functions, such as a factory reset, via manipulated JSON batch API requests

[Mitigation] Restrict external access to the router's management interface and apply temporary access control lists (ACLs) until an official patch is released

[Affected Scope] Wavlink WN579X3-D V250402 firmware version.

[Impact] An authenticated remote attacker can manipulate the 'Name' parameter in the port forwarding configuration API to execute arbitrary OS commands with root privileges.

[Mitigation] Restrict external access to the router's management interface and apply the latest firmware patch from the vendor immediately.

[Affected Scope] WAVLINK WL-WN579A3-A firmware version 2026-03-10-94f93d4 and prior.

[Impact] Unauthenticated remote attackers can inject malicious OS commands to gain full root-level control over the device and compromise the internal network.

[Mitigation] Disable remote WAN management, restrict access to the administration interface, and monitor network traffic for suspicious CGI requests.

[Affected Scope] D-Link DIR-820L router with firmware version DIR820LA1_FW105B03 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a crafted HTTP request

[Mitigation] Since this product is End-of-Life (EOL), immediate hardware replacement is highly recommended; otherwise, disable remote management and restrict access

[Affected Scope] D-Link DIR-820L firmware version 1.05B03 and prior.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via crafted HTTP POST requests, leading to full device compromise.

[Mitigation] Since this device is End-of-Life (EOL), immediate replacement of the hardware is highly recommended. Alternatively, disable remote management and restrict access.

[Affected Scope] DrayTek Vigor3900, Vigor2960, and Vigor300B devices running firmware versions prior to 1.5.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP POST request

[Mitigation] Immediately upgrade the device firmware to version 1.5.1 or higher and disable external WAN access to the management interface

[Affected Scope] Sumavision Enhanced Multimedia Router (EMR) version 3.0.4.27 and potentially prior firmware versions.

[Impact] Unauthenticated remote attackers can create arbitrary accounts with administrative privileges via CSRF or direct HTTP requests, leading to complete device compromise.

[Mitigation] Restrict external access to the web management interface, deploy WAF rules to block malicious parameter patterns, and apply the latest secure firmware from the vendor.

[Affected Scope] D-Link router and AP models including DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands and achieve full system compromise by sending specially crafted HTTP requests.

[Mitigation] Since most affected devices are End-of-Life (EoL), immediately replace them with supported models, or restrict WAN-side management access and disable remote administration.

[Affected Scope] ZyXEL P660HN-T1A v1 routers distributed by TrueOnline running TCLinux Firmware v7.3.15.0 v001 / 3.40(ULM.0)b31 or prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by manipulating the remote_host parameter in the ViewLog.asp page

[Mitigation] Immediately disable external WAN access to the web management interface, apply the latest firmware updates, or replace legacy end-of-life devices

[Affected Scope] Dasan GPON home routers

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and gain full control of the device by sending specially crafted HTTP requests

[Mitigation] Apply the latest firmware updates from the vendor, disable external WAN-side management access, and restrict access to trusted networks

[Affected Scope] D-Link router models DIR-880L (v1.08B04 and prior), DIR-868L (v1.12b04 and prior), DIR-865L (v1.08.B01 and prior), and DIR-860L (v1.10b04 and prior)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the target router by manipulating specific parameters in SOAP API requests, leading to complete device compromise

[Mitigation] Apply the latest official firmware patches provided by the vendor, disable remote WAN management interfaces, or replace end-of-life devices

[Affected Scope] NETGEAR DGN2200 wireless ADSL2+ modem router devices running firmware versions up to and including 10.0.0.50.

[Impact] Remote authenticated attackers can execute arbitrary OS commands with root privileges via shell metacharacters in the ping_IPAddr parameter of HTTP POST requests, leading to complete device compromise.

[Mitigation] Apply the latest official firmware updates from NETGEAR, disable remote management, and restrict access to the web administration interface.