Read the docs

Shenzhen Yipu Commercial and Trading Co., Ltd

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Shenzhen Yipu Commercial and Trading Co., Ltd records in CISA KEV

No Shenzhen Yipu Commercial and Trading Co., Ltd vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2026-30328 CVE-2026-41926 · GHSA-r939-4h6w-w7j6

WDR201A WiFi Extender OS Command Injection via firewall.cgi

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01235 Published 2026-05-04 No fix listed CWE-78
TI-2026-30327 CVE-2026-41925 · GHSA-rcvc-m8x7-hg25

WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remote attackers to execute arbitrary shell c…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04002 Published 2026-05-04 No fix listed CWE-78
TI-2026-30326 CVE-2026-41924 · GHSA-fchj-4xr4-27f8

WDR201A WiFi Extender OS Command Injection via makeRequest.cgi

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by inje…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.032 Published 2026-05-04 No fix listed CWE-78
TI-2026-30325 CVE-2026-41923 · GHSA-2frf-w2p8-6vq5

WDR201A WiFi Extender OS Command Injection via internet.cgi

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecti…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03091 Published 2026-05-04 No fix listed CWE-78
TI-2026-30324 CVE-2026-41922 · GHSA-8wgj-4v3p-3568

WDR201A WiFi Extender OS Command Injection via wireless.cgi

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecti…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04983 Published 2026-05-04 No fix listed CWE-78
TI-2026-30329 CVE-2026-41927 · GHSA-59q4-38q7-24rv

WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgi

Priority LOW 36

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved re…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00396 Published 2026-05-04 No fix listed CWE-121
Open these records in search →