VulnSocial

CVE-2026-41927Disclosure

LOWCVSS 8.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved return address by sending a POST request with a Content-Length header exceeding 512 bytes. Attackers can exploit insufficient length validation in the fgets() call to achieve arbitrary code execution through return-oriented programming or return-to-libc techniques.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-05-04); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-04: 2Mentions · 2026-05-05: 1Technical Details · 2026-05-04: 2Technical Details · 2026-05-05: 105-0405-05
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-042
Disclosure2
2026-05-051
Disclosure1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-41927 WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allo… https://www.cve.org/CVERecord?id=CVE-2026-41927

    Post summary

    A stack-based buffer overflow CVE (CVE‑2026‑41927) has been identified in the WDR201A WiFi Extender firmware, affecting the firewall.cgi and makeRequest.cgi binaries.

    00010169
    57.4K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-41927 Stack-Based Buffer Overflow in WDR201A WiFi Extender Firewall CGI Binaries https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41927

    Post summary

    The post announces a stack‑based buffer overflow flaw in the CGI firewall binaries of the WDR201A WiFi extender, linking to a vulnerability details page.

    0000060
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-41927 WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allo… https://www.cve.org/CVERecord?id=CVE-2026-41927 ----- Traducción: CVE-2026-41927 WDR… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-41927, a stack-based buffer overflow in WDR201A WiFi Extender's firewall.cgi and makeRequest.cgi binaries, linking to the CVE record but providing no PoC, exploit code, patches, or evidence of active exploitation.

    0000033
    75 followersView on X

Explore more

Back to dashboard