Totolink NR1800X 9.1.0u.6279_B20210910 POST Request /cgi-bin/cstecgi.cgi setTracerouteCfg command kura hakki ndiyam
Wuro vulnerability wey an yi classify sey kura an gano shi a cikin Totolink NR1800X 9.1.0u.6279_B20210910. Gaskiya, setTracerouteCfg na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /cgi-bin/cstecgi.cgi na cikin fayil, POST Request Handler na cikin sashi. Ngam manipulation of the argument command shi kura hakki ndiyam. CWE shidin ka a yi bayani matsala sai ya kai CWE-77. Gaskiya, laifi an fitar da shi 01/22/2026. Advisory ɗin ana rabawa don saukewa a lavender-bicycle-a5a.notion.site. Wannan rauni ana sayar da shi da suna CVE-2026-1327. Ngam yiɗi ka a tuma ndiyam ka nder waya. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a lavender-bicycle-a5a.notion.site. Kama 0-day, an ndiyam a wuro be $0-$5k. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
3 Goyarwa · 98 Datenpunkte