CVE-2026-75783

Publié : 18 août 2026

Modifié : 18 août 2026

Score CVSS

9.6

CRITICAL

Description détaillée

A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Références et Patchs

https://github.com/meishigana/CVE/blob/main/team15_20260702/01_wlc100p-netifd/poc/poc-netifd-overflow.py https://github.com/meishigana/CVE/tree/main/team15_20260702/01_wlc100p-netifd https://vuldb.com/cve/CVE-2026-75783 https://vuldb.com/submit/877772 https://vuldb.com/vuln/391524 https://vuldb.com/vuln/391524/cti

Dernières Vulnérabilités

CVE-2026-73692

Dolibarr contains an authorization bypass vulnerability in the clonetasks mass action that allows authenticated users with project creation permissions to clone tasks into private projects they are not authorized to access. An inverted boolean condition in the private-project membership check within actions_massactions.inc.php causes the authorization flag to be set for unauthorized users, allowing attackers to supply a user-controlled projectid POST parameter to create task records in any private project.

VOIR DÉTAILS

CVE-2026-50575

BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device ID and bypass registration controls. Version 3.0.0-alpha contains a patch. No known workarounds are available.

VOIR DÉTAILS

CVE-2026-32468

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.

VOIR DÉTAILS