Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Shenzhen Yipu Commercial and Trading Co., Ltd Clear all filters
TI-2026-30329 CVE-2026-41927 · GHSA-59q4-38q7-24rv

WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgi

Priority LOW 36

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved re…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00396 Published 2026-05-04 No fix listed CWE-121
TI-2026-30328 CVE-2026-41926 · GHSA-r939-4h6w-w7j6

WDR201A WiFi Extender OS Command Injection via firewall.cgi

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01235 Published 2026-05-04 No fix listed CWE-78
TI-2026-30327 CVE-2026-41925 · GHSA-rcvc-m8x7-hg25

WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remote attackers to execute arbitrary shell c…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04002 Published 2026-05-04 No fix listed CWE-78
TI-2026-30326 CVE-2026-41924 · GHSA-fchj-4xr4-27f8

WDR201A WiFi Extender OS Command Injection via makeRequest.cgi

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by inje…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.032 Published 2026-05-04 No fix listed CWE-78
TI-2026-30325 CVE-2026-41923 · GHSA-2frf-w2p8-6vq5

WDR201A WiFi Extender OS Command Injection via internet.cgi

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecti…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03091 Published 2026-05-04 No fix listed CWE-78
TI-2026-30324 CVE-2026-41922 · GHSA-8wgj-4v3p-3568

WDR201A WiFi Extender OS Command Injection via wireless.cgi

Priority HIGH 81

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecti…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04983 Published 2026-05-04 No fix listed CWE-78