|
601
|
7.2 |
HIGH
Network
|
linksys
|
mr9600_firmware
|
A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. T…
Update
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-6992
|
2026-04-30 23:09 |
2026-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
602
|
7.3 |
HIGH
Network
|
dlink
|
dir-822_firmware
|
A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argumen…
Update
|
CWE-74 CWE-77
Injection Command Injection
|
CVE-2026-7067
|
2026-04-30 23:09 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
603
|
8.8 |
HIGH
Adjacent
|
dlink
|
dir-825_firmware
|
A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD_process of the file sserver.c of the component nmbd. Such manipulation leads to buffer overflow. The attack ca…
Update
|
CWE-119 CWE-120
Incorrect Access of Indexable Resource ('Range Error') Classic Buffer Overflow
|
CVE-2026-7068
|
2026-04-30 23:08 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
604
|
8.0 |
HIGH
Adjacent
|
dlink
|
dir-825_firmware
|
A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Performing a manipulation of the argum…
Update
|
CWE-119 CWE-120
Incorrect Access of Indexable Resource ('Range Error') Classic Buffer Overflow
|
CVE-2026-7069
|
2026-04-30 23:08 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
605
|
7.8 |
HIGH
Local
|
openclaw
|
openclaw
|
OpenClaw before 2026.4.8 contains a privilege escalation vulnerability allowing previously paired nodes to reconnect with exec-capable commands without operator.admin scope requirement. Attackers can…
New
|
CWE-863
Incorrect Authorization
|
CVE-2026-42432
|
2026-04-30 23:06 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
606
|
8.1 |
HIGH
Network
|
openclaw
|
openclaw
|
OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invoke(browser.proxy) that allows mutation of persistent browser profiles. Attackers can exploit this path to circumvent the …
New
|
CWE-863
Incorrect Authorization
|
CVE-2026-42431
|
2026-04-30 23:06 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
607
|
7.1 |
HIGH
Network
|
openclaw
|
openclaw
|
OpenClaw before 2026.4.8 contains a privilege escalation vulnerability in the gateway plugin HTTP authentication mechanism that widens identity-bearing operator.read requests into runtime operator.wr…
New
|
CWE-863
Incorrect Authorization
|
CVE-2026-42429
|
2026-04-30 23:06 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
608
|
6.5 |
MEDIUM
Network
|
openclaw
|
openclaw
|
OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in Playwright redirect handling that allows attackers to bypass strict SSRF checks. Attackers can exploit request-time na…
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-42430
|
2026-04-30 23:05 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
609
|
7.1 |
HIGH
Network
|
openclaw
|
openclaw
|
OpenClaw versions before 2026.4.8 fail to enforce integrity verification on downloaded plugin archives. Attackers can install malicious or tampered plugin packages without detection, compromising the…
New
|
CWE-353
Missing Support for Integrity Check
|
CVE-2026-42428
|
2026-04-30 23:05 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
610
|
5.3 |
MEDIUM
Local
|
openclaw
|
openclaw
|
OpenClaw before 2026.4.8 contains a remote code execution vulnerability caused by missing environment variable denylist entries for HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS. …
New
|
CWE-184
Incomplete Blacklist
|
CVE-2026-42427
|
2026-04-30 23:05 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|