Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

15 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-27683	Analizada	Crítica (9.8)	0.88%	—	Dlink Go-rt-ac750 Firmware	11/4/2024	17/6/2026	D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger the vulnerablilify.
CVE-2024-27684	Analizada	Media (6.1)	0.51%	—	Dlink Go-rt-ac750 Firmware	4/3/2024	17/6/2026	A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750_A1_FW_v101b03 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
CVE-2024-22853	Modificada	Crítica (9.8)	4.8%	💥 PoC	Dlink Go-rt-ac750 Firmware	6/2/2024	17/6/2026	D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session.
CVE-2024-22852	Modificada	Crítica (9.8)	1.1%	—	Dlink Go-rt-ac750 Firmware	6/2/2024	17/6/2026	D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to enable telnet service via a specially crafted payload.
CVE-2024-22916	Modificada	Crítica (9.8)	0.99%	—	Dlink Go-rt-ac750 Firmware	16/1/2024	17/6/2026	In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow.
CVE-2023-48842	Modificada	Crítica (9.8)	3.7%	💥 PoC	Dlink Go-rt-ac750 Firmware	1/12/2023	17/6/2026	D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.
CVE-2023-34800	Modificada	Crítica (9.8)	29%	—	Dlink Go-rt-ac750 Firmware	15/6/2023	17/6/2026	D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.
CVE-2023-26822	Modificada	Crítica (9.8)	3.4%	—	Dlink Go-rt-ac750 Firmware	1/4/2023	17/6/2026	D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main.
CVE-2022-37056	Analizada	Crítica (9.8)	10%	—	Dlink Go-rt-ac750 Firmware	28/8/2022	17/6/2026	D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command Injection via /cgibin, hnap_main,
CVE-2022-37055	Analizada	Crítica (9.8)	56%	⚠ Explotación activa	Dlink Go-rt-ac750 Firmware	28/8/2022	17/6/2026	D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
CVE-2022-37057	Analizada	Crítica (9.8)	26%	—	Dlink Go-rt-ac750 Firmware	28/8/2022	17/6/2026	D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.
CVE-2022-36526	Modificada	Alta (7.5)	1.2%	—	Dlink Go-rt-ac750 Firmware	15/8/2022	9/7/2026	D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Authentication Bypass via function phpcgi_main in cgibin.
CVE-2022-36525	Modificada	Crítica (9.8)	1.6%	—	Dlink Go-rt-ac750 Firmware	15/8/2022	17/6/2026	D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer Overflow via authenticationcgi_main.
CVE-2022-36524	Modificada	Alta (7.5)	0.86%	—	Dlink Go-rt-ac750 Firmware	15/8/2022	9/7/2026	D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static Default Credentials via /etc/init0.d/S80telnetd.sh.
CVE-2022-36523	Modificada	Crítica (9.8)	2.2%	—	Dlink Go-rt-ac750 Firmware	15/8/2022	17/6/2026	D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php.