https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 22:49:12 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-118238 <p>The Tenda W18E web management server is vulnerable to OS command injection via the &#34;diagnose&#34; packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, which are later concatenated into a tcpdump command and executed with root privileges. This vulnerability can be exploited without authentication if the device is in a factory-reset state.</p> <p>The Tenda W18E web management server is vulnerable to OS command injection via the &#34;diagnose&#34; packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, which are later concatenated into a tcpdump command and executed with root privileges. This vulnerability can be exploited without authentication if the device is in a factory-reset state.</p> https://db.gcve.eu/vuln/fkie_cve-2026-118238 https://db.gcve.eu/vuln/ghsa-26w6-cmwv-h7mc <p>The Tenda W18E web management server is vulnerable to OS command injection via the &#34;diagnose&#34; packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, which are later concatenated into a tcpdump command and executed with root privileges. This vulnerability can be exploited without authentication if the device is in a factory-reset state.</p> <p>The Tenda W18E web management server is vulnerable to OS command injection via the &#34;diagnose&#34; packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, which are later concatenated into a tcpdump command and executed with root privileges. This vulnerability can be exploited without authentication if the device is in a factory-reset state.</p> https://db.gcve.eu/vuln/ghsa-26w6-cmwv-h7mc