Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-30703

Command Injection in WiFi Extender Web Interface Leading to Remote Code Execution

A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The adm.cgi endpoint improperly sanitizes user-supplied input provided to a command-related parameter in the sysCMD functionality.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Shenzhen Yuner Yipu
Products
Wdr201a
CVE-2026-30702

Broken Authentication in WiFi Extender WDR201A Web Management Interface

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface. The login page does not properly enforce session validation, allowing attackers to bypass authentication by directly accessing restricted web application endpoints through forced browsing

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Shenzhen Yuner Yipu
Products
Wdr201a