Skip to content
OpenAdvisories

Vendor

Peplink

12 known vulnerabilities.

Products

Surf SOHO HW1 6 Smart Reader 5 InControl 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.7
    CVE-2026-57920

    Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certa…

    Peplink InControl
  • High 8.3
    CVE-2023-45744

    A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Re…

    Peplink Smart Reader
  • High 7.2
    CVE-2023-34356

    An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in…

    Peplink Surf SOHO HW1
  • High 7.2
    CVE-2023-28381

    An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6…

    Peplink Surf SOHO HW1
  • High 7.2
    CVE-2023-27380

    An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (…

    Peplink Surf SOHO HW1
  • High 7.2
    CVE-2023-35193

    An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 …

    Peplink Surf SOHO HW1
  • High 7.2
    CVE-2023-35194

    An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 …

    Peplink Surf SOHO HW1