-
Xiaomi MiWiFi RD18 1.0.91: xqsmarthome.lua guest_tunnelSmartControllerRequest OS Command Injection (Authenticated, Root RCE)
-
Xiaomi RAX3000M (RD15) 1.0.87: sysapi macfilterctl rulename Lua Code Injection (Authenticated, Root RCE)
-
Tenda CH7 V21.5.2.12: Kylin goform/ate Factory Test Interface OS Command Injection (Authenticated, Root RCE)
-
B-LINK X26 (AC12) V1.0.1: lighttpd.cgi Blink Management API Unauthenticated OS Command Injection (Pre-Auth, Root RCE)
-
Alpine Linux alpine-virt 3.24.1: tiny-cloud NoCloud CIDATA Seed Volume Arbitrary Script Execution (Pre-Auth, Boot-time Root RCE)
-
Tenda G3 V3.0: httpd umountUSBPartition OS Command Injection (Authenticated, Root RCE)
-
Tenda W18E V2.0: httpd WAN-Diagnosis Ping Hostname OS Command Injection (Unauthenticated, Root RCE)
-
TP-Link TL-XDR6010 V2.0: dms VPN IPsec ip-pool name OS Command Injection (Authenticated, Root RCE)
-
TP-LINK TL-R470GP-AC V8.0: wol.lua wol_wake OS Command Injection (Authenticated, Root RCE)