Routing, Switching & Wi-Fi
CVE-2026-34908: UniFi OS improper access control allows unauthorized system changes
UniFi OS access-control failures can allow unauthorized system changes from the network. Update the affected console or server and review its state and access logs; installing the fix does not reverse earlier changes.
CVE-2025-67038: Lantronix EDS5000 Code Injection Vulnerability
Lantronix EDS5000 username-parameter injection can run commands as root. Record the model, hardware revision and firmware; available release notes describe upgrade constraints but do not establish a CVE-specific fixed build.
CVE-2021-27137: DD-WRT Stack-Based Buffer Overflow Vulnerability
DD-WRT's exploited UPnP buffer overflow can allow unauthenticated code execution. The linked source correction does not identify a compatible router firmware image; match the hardware and build, and preserve evidence before remediation.
CVE-2026-86060: MikroTik RouterOS MikroTrick policy-mask privilege escalation
MikroTik RouterOS policy-mask manipulation can escalate privileges. Upgrade the affected release, restrict untrusted SSH access, and inspect users, scripts and configuration even when the router does not report a Flagged state.
CVE-2026-67277: MikroTik RouterOS btest unauthenticated memory disclosure and denial of service
Missing authentication in RouterOS btest can disclose kernel memory or interrupt service. Check the service and release, then install the supported fix; restricting SSH alone does not establish that this btest flaw is resolved.