https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:13:23 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-84682 <p>A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command handler to execute arbitrary operating system commands as root during device boot.</p> <p>Successful exploitation may result in complete device compromise through arbitrary command execution with root privileges.</p> <p>A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command handler to execute arbitrary operating system commands as root during device boot.</p> <p>Successful exploitation may result in complete device compromise through arbitrary command execution with root privileges.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-84682 https://vulnerability.circl.lu/vuln/ghsa-gjhm-8mvw-7r24 <p>A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command handler to execute arbitrary operating system commands as root during device boot.</p> <p>Successful exploitation may result in complete device compromise through arbitrary command execution with root privileges.</p> <p>A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command handler to execute arbitrary operating system commands as root during device boot.</p> <p>Successful exploitation may result in complete device compromise through arbitrary command execution with root privileges.</p> https://vulnerability.circl.lu/vuln/ghsa-gjhm-8mvw-7r24