-
Tenda IC7-PRS 2209020910: login.js super_yg Backdoor Account (Pre-Auth, Login Bypass and Credential Recovery)
-
Linksys DBC-03 (AX9) V22.03.01.46: httpd stok Session Token Unauthenticated Issuance and Config API Access (Pre-Auth, Config Takeover)
-
Tenda FH456 V2.0BR V11.11.01.13: goform/ate Debug Interface Unauthorized Access (Pre-Auth, Sensitive Config Exposure)
-
TP-LINK TL-XAP3000GI-PoE V4.0 1.0.23: dms set_password Unauthenticated Administrator Password Change (Pre-Auth, Account Takeover)
-
Tenda F6 V5.0 V12.02.01.64: httpd goform setWizard Unauthenticated WiFi Configuration Modification (Pre-Auth, Config Tampering)
-
Tenda F6 V5.0 V12.02.01.64: httpd goform Sensitive Interfaces Unauthenticated Information Disclosure (Pre-Auth, WiFi Password and PPPoE Credential Exposure)
-
B-LINK X26 (AC12) V1.0.1: lighttpd.cgi Blink Management API Unauthenticated OS Command Injection (Pre-Auth, Root RCE)