CVE Vulnerability Advisory Database

[Affected Scope] WAVLINK WL-WN530HG4B router with firmware version M_V260724.

[Impact] Authenticated remote attackers can exploit the 'Name' parameter within the port forwarding function of '/cgi-bin/wapi.cgi' to execute arbitrary OS commands with root privileges.

[Mitigation] Restrict access to the router's management interface, apply firewall rules to block malicious payloads, and upgrade to the latest patched firmware version.

[Affected Scope] 84 malicious versions across 42 @tanstack/* packages published between 19:20 and 19:26 UTC on 2026-05-11

[Impact] Attackers successfully published credential-stealing malware under trusted identities by hijacking legitimate OIDC tokens

[Mitigation] Immediately audit dependency trees, purge affected package versions, and rotate all potentially exposed credentials

[Affected Scope] End-of-Life (EOL) TP-Link Archer C7(EU) V2 (prior to 241108) and TL-WR841N/ND(MS) V9 (prior to 241108) routers.

[Impact] Authenticated attackers can execute arbitrary system commands and gain full control of the device via the Parental Control configuration page.

[Mitigation] Since these products are EOL, purchasing new supported hardware is highly recommended; otherwise, apply the emergency patch immediately and restrict management access.

[Affected Scope] Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 and prior

[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with system privileges by sending a crafted HTTP POST request to the CGI program

[Mitigation] Since this is an end-of-life (EOL) legacy device, immediate hardware replacement or strict access control restricting WAN-side management access is highly recommended

[Affected Scope] TP-Link TL-WR841N wireless routers

[Impact] Network-adjacent attackers can bypass authentication to access the httpd service (TCP port 80) and disclose stored credentials, leading to full device compromise

[Mitigation] Apply the latest official firmware updates from the vendor and disable remote management features immediately

[Affected Scope] ASUS RT-AX55 devices running firmware version 3.0.0.4.386.51598 and prior.

[Impact] Authenticated attackers can execute arbitrary system commands with root privileges, leading to complete device compromise.

[Mitigation] Immediately upgrade to the latest official secure firmware version and disable remote WAN management.

[Affected Scope] Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers

[Impact] An authenticated, remote attacker can execute arbitrary commands with root-level privileges, leading to complete device compromise

[Mitigation] Since these devices are End-of-Life (EoL) and no patches will be released, administrators must disable remote management or replace the devices immediately

[Affected Scope] D-Link DIR-600 router (hardware revision Bx) with firmware versions prior to 2.17b02.

[Impact] Remote attackers can hijack administrator sessions to create unauthorized admin accounts, enable remote management, apply malicious configurations, or trigger arbitrary ping requests.

[Mitigation] Upgrade to firmware version 2.17b02 or later, disable remote management, and restrict access to the administration interface.