Skip to content
OpenAdvisories

Archive

7 February 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-25857 Public exploit

    Tenda G300-F Command Injection via formSetWanDiag

    Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality (formSetWanDiag). The implementation constructs a shell command that invokes curl and incorporates attacker-controlled …

  • High 7.3
    CVE-2026-2113 Public exploit Scanner template

    yuan1994 tpadmin WebUploader preview.php deserialization

    A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The…