A vulnerability classified as problematic was found in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispatcher.go. Such manipulation leads to null pointer dereference.
This vulnerability is documented as CVE-2026-8783. The attack can be executed remotely. Additionally, an exploit exists.
Upgrading the affected component is advised.
The same pull request fixes multiple security issues.
A vulnerability classified as problematic has been found in omec-project amf up to 2.1.3-dev. This affects an unknown function of the file ngap/handler.go of the component NGAP Message Handler. This manipulation causes null pointer dereference.
This vulnerability is registered as CVE-2026-8782. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
It is recommended to upgrade the affected component.
The same pull request fixes multiple security issues.
A vulnerability described as problematic has been identified in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference.
This vulnerability is cataloged as CVE-2026-8781. The attack may be launched remotely. Furthermore, there is an exploit available.
Upgrading the affected component is recommended.
The same pull request fixes multiple security issues.
A vulnerability marked as problematic has been reported in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler. The manipulation leads to memory corruption.
This vulnerability is listed as CVE-2026-8780. The attack may be initiated remotely. In addition, an exploit is available.
It is suggested to upgrade the affected component.
The same pull request fixes multiple security issues.
A vulnerability labeled as problematic has been found in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement can lead to memory corruption.
This vulnerability is tracked as CVE-2026-8779. The attack can be launched remotely. Moreover, an exploit is present.
The affected component should be upgraded.
The same pull request fixes multiple security issues.
A vulnerability identified as critical has been detected in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Performing a manipulation of the argument stadrv_ssid results in command injection.
This vulnerability is identified as CVE-2026-8777. The attack can be initiated remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability categorized as critical has been discovered in Edimax BR-6428NS 1.10. This vulnerability affects the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Such manipulation of the argument pptpUserName leads to buffer overflow.
This vulnerability is referenced as CVE-2026-8776. It is possible to launch the attack remotely. Furthermore, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was found in Edimax BR-6428NS 1.10. It has been rated as critical. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation of the argument L2TPUserName causes buffer overflow.
The identification of this vulnerability is CVE-2026-8775. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was found in Edimax BR-6228NC 1.22. It has been declared as critical. Affected by this issue is the function mp of the file /goform/mp of the component POST Request Handler. The manipulation of the argument command results in command injection.
This vulnerability was named CVE-2026-8774. The attack may be performed from remote. In addition, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.