CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
DD-WRT UPnP SSDP Buffer Overflow Vulnerability (CVE-2021-27137) Analysis and Mitigation Guide
[Affected Scope] DD-WRT firmware versions before build 45724 with UPnP functionality enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code or cause a Denial of Service (DoS) by sending crafted SSDP M-SEARCH requests, with active exploitation by botnets (e.g., c0xmo) confirmed in the wild [1, 2, references]
[Mitigation] Immediately upgrade DD-WRT firmware to build 45724 or later, and disable UPnP services until the patch is applied [1, references]
Zyxel GS1900 Series Switch CGI Stack-based Buffer Overflow Remote Code Execution (RCE) Advisory (CVE-2026-7273)
[Affected Scope] Zyxel GS1900-48HPv2 firmware versions up to 2.90(ABTQ.1)C0.
[Impact] Unauthenticated LAN-based attackers can execute arbitrary OS commands and gain full control of the device via crafted HTTP requests.
[Mitigation] Immediately update to the latest patched firmware and restrict access to the management interface using ACLs.
F5 BIG-IP APM Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-53521)
[Affected Scope] Virtual servers configured with a BIG-IP APM (Access Policy Manager) access policy
[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) with high privileges by sending specially crafted malicious network traffic
[Mitigation] Immediately apply the latest security patches provided by F5, and restrict access to APM virtual servers until patched