Skip to content
OpenAdvisories

Archive

30 August 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.9

    D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow

    A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The…

  • Critical 9.9
    CVE-2026-82592 Public exploit

    D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow

    A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow…

  • Critical 10.0

    Tenda HG10 Boa Web Server formIPv6Routing buffer overflow

    A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The at…

  • Critical 9.1
    CVE-2026-82539 Public exploit

    TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

    A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack…

  • Critical 9.8

    MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token

    The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing authorization in the send_link() AJAX handler and improper token validation in the activate() function. This makes …